Oracle Linux 7 : freerdp / and / vinagre (ELSA-2019-2157)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2157 advisory. freerdp 2.0.0-1.rc4 - Update to 2.0.0-rc4 1291254 vinagre 3.22.0-12 - Apply the patch - Resolves: 1569552 3.22.0-11 - Set maximum length of RDP password to 255...

Denial Of Service (DoS)

libfreerdp.so is vulnerable to Denial of Service DoS attacks. This vulnerability could allow an attacker to create a specially crafted Remote Desktop Protocol RDP packet that, when received by a vulnerable FreeRDP client, would crash the client...

CVE-2023-40589

A flaw was found in the FreeRDP implementation. Feeding crafted input into the ncrushdecompress function may cause a buffer overflow, resulting in a crash...

CVE-2023-40576

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the RleDecompress function. This Out-Of-Bounds Read occurs because FreeRDP processes the pbSrcBuffer variable without checking if it...

CVE-2023-40575

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the generalYUV444ToRGB8uP3AC4RBGRX function. This issue is likely down to insufficient data for the pSrc variable and results in crashe...

CVE-2023-40569

A flaw was found in FreeRDP. Incorrect calculations in the progressivedecompress function may allow for a buffer overflow, resulting in a crash...

CVE-2023-40574

A flaw was found in FreeRDP. Incorrect calculations of the nHeight and srcStep variables may allow for an out-of-bounds write, leading to a crash...

CVE-2023-40186

An integer overflow vulnerability was found in the gdiCreateSurface function in FreeRDP, which may result in a crash...

CVE-2023-39355

A flaw was found in FreeRDP. If context-maxPlaneSize is 0, context-planesBuffer will be freed. However, without updating context-planesBuffer, this may result in a use-after-free problem, leading to a crash...

CVE-2023-40567

A flaw was found in FreeRDP. Improper validation in the cleardecompressbandsdata function may allow for an out-of-bounds write, resulting in a crash...

CVE-2023-40188

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the generalLumaToYUV444 function. This Out-Of-Bounds Read occurs because processing is done on the in variable without checking if it...

CVE-2023-39352

A flaw was found in FreeRDP. An out-of-bounds write may occur when the values rect-left and rect-top are exactly equal to surface-width and surface-height. eg. rect-left == surface-width && rect-top == surface-height. This issue can result in a crash...

CVE-2023-40187

A use-after-free flaw was found in FreeRDP. This issue occurs in the avc420ensurebuffer and avc444ensurebuffer functions, which may result in a crash...

CVE-2023-39353

A flaw was found in FreeRDP. In the libfreerdp/codec/rfx.c file, there is no offset validation in tile-quantIdxY, tile-quantIdxCb, and tile-quantIdxCr. As a result, crafted input can lead to an out-of-bounds read, which may result in a crash...

CVE-2023-39354

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the nscrledecompressdata function. The Out-Of-Bounds Read occurs because it processes context-Planes without checking if it contains da...

CVE-2023-39350

A flaw was found in FreeRDP. When an insufficient blockLen value is provided and proper length validation is not performed, an Integer Underflow can occur, leading to a Denial of Service DOS...

CVE-2023-39351

A flaw was found in FreeRDP. If the initialization process of tiles is incomplete, for various reasons, tiles will have a NULL pointer. This can be accessed in further processing, causing a program crash...

FreeRDP general_YUV444ToRGB_8u_P3AC4R_BGRX Buffer Overflow Vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that stems from insufficient data in the pSrc variable in the generalYUV444ToRGB8uP3AC4RBGRX function, which can be exploited by an attacker to...

FreeRDP general_LumaToYUV444 function buffer overflow vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that stems from the generalLumaToYUV444 function processing on the in variable without checking if it contains data of sufficient length. An...

FreeRDP Buffer Overflow Vulnerability (CNVD-2023-72250)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that originates from a boundary error in the ncrushdecompress function when handling untrusted input. A remote attacker could exploit the...