[SECURITY] Fedora 39 Update: freerdp-2.11.1-1.fc39

The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the FreeR DP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...

Fedora 37 : freerdp (2023-5e6796cb83)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-5e6796cb83 advisory. Update to 2.11.1 ---- Update to 2.11.0 CVE-2023-39350, CVE-2023-39351, CVE-2023-39352, CVE-2023-39353, CVE-2023-39354, CVE-2023-39356, CVE-2023-4018...

Fedora: Security Advisory (FEDORA-2023-5134642a68)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for freerdp (FEDORA-2023-10e43bcebb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for xrdp (FEDORA-2023-40298f6951)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: freerdp-2.11.1-1.fc38

The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the FreeR DP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...

[SECURITY] Fedora 37 Update: xrdp-0.9.23-1.fc37

xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...

Fedora 38 : freerdp (2023-10e43bcebb)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-10e43bcebb advisory. Update to 2.11.1 ---- Update to 2.11.0 CVE-2023-39350, CVE-2023-39351, CVE-2023-39352, CVE-2023-39353, CVE-2023-39354, CVE-2023-39356, CVE-2023-4018...

Oracle Linux 7 : freerdp / and / vinagre (ELSA-2019-2157)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2157 advisory. freerdp 2.0.0-1.rc4 - Update to 2.0.0-rc4 1291254 vinagre 3.22.0-12 - Apply the patch - Resolves: 1569552 3.22.0-11 - Set maximum length of RDP password to 255...

Oracle Linux 7 : freerdp (ELSA-2020-4031)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4031 advisory. 2.1.1-2 - Update to 2.1.1 1834286 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Denial Of Service (DoS)

libfreerdp.so is vulnerable to Denial of Service DoS attacks. This vulnerability could allow an attacker to create a specially crafted Remote Desktop Protocol RDP packet that, when received by a vulnerable FreeRDP client, would crash the client...

CVE-2023-40589

A flaw was found in the FreeRDP implementation. Feeding crafted input into the ncrushdecompress function may cause a buffer overflow, resulting in a crash...

CVE-2023-40576

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the RleDecompress function. This Out-Of-Bounds Read occurs because FreeRDP processes the pbSrcBuffer variable without checking if it...

CVE-2023-40575

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the generalYUV444ToRGB8uP3AC4RBGRX function. This issue is likely down to insufficient data for the pSrc variable and results in crashe...

CVE-2023-40569

A flaw was found in FreeRDP. Incorrect calculations in the progressivedecompress function may allow for a buffer overflow, resulting in a crash...

CVE-2023-40574

A flaw was found in FreeRDP. Incorrect calculations of the nHeight and srcStep variables may allow for an out-of-bounds write, leading to a crash...

CVE-2023-40186

An integer overflow vulnerability was found in the gdiCreateSurface function in FreeRDP, which may result in a crash...

CVE-2023-39355

A flaw was found in FreeRDP. If context-maxPlaneSize is 0, context-planesBuffer will be freed. However, without updating context-planesBuffer, this may result in a use-after-free problem, leading to a crash...

CVE-2023-40567

A flaw was found in FreeRDP. Improper validation in the cleardecompressbandsdata function may allow for an out-of-bounds write, resulting in a crash...

CVE-2023-40188

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the generalLumaToYUV444 function. This Out-Of-Bounds Read occurs because processing is done on the in variable without checking if it...