Lucene search
+L

4362 matches found

OSV
OSV
added 2018/12/20 3:29 p.m.23 views

CVE-2018-1000852

FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvcmain.c, drdynvcprocesscapabilityrequest that can result in The RDP server can read the client's memory.. This attack appear to...

6.5CVSS6.5AI score
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2018/12/20 3:29 p.m.25 views

CVE-2018-1000852

FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvcmain.c, drdynvcprocesscapabilityrequest that can result in The RDP server can read the client's memory.. This attack appear to...

6.5CVSS6.7AI score0.02666EPSS
SaveExploits1References2
OSV
OSV
added 2018/12/20 3:29 p.m.5 views

UBUNTU-CVE-2018-1000852

FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvcmain.c, drdynvcprocesscapabilityrequest that can result in The RDP server can read the client's memory.. This attack appear to...

9.8CVSS6.7AI score0.02666EPSS
SaveExploits1References3
Prion
Prion
added 2018/12/20 3:29 p.m.23 views

Design/Logic Flaw

FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvcmain.c, drdynvcprocesscapabilityrequest that can result in The RDP server can read the client's memory.. This attack appear to...

6.4CVSS6.5AI score0.02666EPSS
SaveExploits1References6Affected Software3
Cvelist
Cvelist
added 2018/12/20 3:0 p.m.27 views

CVE-2018-1000852

FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvcmain.c, drdynvcprocesscapabilityrequest that can result in The RDP server can read the client's memory.. This attack appear to...

7.8AI score0.02666EPSS
SaveExploits1References6
CVE
CVE
added 2018/12/20 3:0 p.m.257 views

CVE-2018-1000852

CVE-2018-1000852 affects FreeRDP 2.0.0-rc3 prior to commit 205c612820dac644d665b5bb1cdf437dc5ca01e3, where an issue in drdynvc_main.c (drdynvc_process_capability_request) allows the RDP server to read client memory. This is triggered when an RDP client connects with the echo option; exploitation ...

6.5CVSS7.6AI score0.02666EPSS
SaveExploits1References6Affected Software1
Debian CVE
Debian CVE
added 2018/12/20 3:0 p.m.22 views

CVE-2018-1000852

FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvcmain.c, drdynvcprocesscapabilityrequest that can result in The RDP server can read the client's memory.. This attack appear to...

6.5CVSS6.9AI score0.02666EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2018/12/13 12:0 a.m.35 views

Ubuntu: Security Advisory (USN-3845-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.9AI score0.08357EPSS
SaveExploits6References2
Tenable Nessus
Tenable Nessus
added 2018/12/13 12:0 a.m.57 views

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : FreeRDP vulnerabilities (USN-3845-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3845-1 advisory. Eyal Itkin discovered FreeRDP incorrectly handled certain stream encodings. A malicious server could use this issue to cause...

9.8CVSS7.5AI score0.08357EPSS
SaveExploits6References7
OSV
OSV
added 2018/12/12 11:52 a.m.11 views

USN-3845-1 freerdp, freerdp2 vulnerabilities

Eyal Itkin discovered FreeRDP incorrectly handled certain stream encodings. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only applies to Ubuntu 18.04 LTS and Ubuntu 18.10. CVE-2018-8784,...

9.8CVSS6.9AI score0.08357EPSS
SaveExploits6References7
Ubuntu
Ubuntu
added 2018/12/12 11:52 a.m.60 views

USN-3845-1: FreeRDP vulnerabilities

Eyal Itkin discovered FreeRDP incorrectly handled certain stream encodings. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only applies to Ubuntu 18.04 LTS and Ubuntu 18.10. CVE-2018-8784,...

9.8CVSS7.5AI score0.08357EPSS
SaveExploits6
BDU FSTEC
BDU FSTEC
added 2018/12/10 12:0 a.m.15 views

The vulnerability of the FreeRDP remote desktop protocol lies in errors in processing specially crafted request packets, which allows attackers to trigger service failures or perform “man-in-the-middle” attacks.

The vulnerability of the FreeRDP remote desktop protocol is related to errors in processing specially crafted request packets. Exploiting this vulnerability allows a malicious actor to cause an application to terminate abnormally or carry out “man-in-the-middle” attacks...

7.5CVSS7AI score0.01722EPSS
SaveExploits1References4Affected Software1
CNVD
CNVD
added 2018/11/30 12:0 a.m.3 views

FreeRDP Out-of-Bounds Write Vulnerability

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team. An out-of-bounds write vulnerability in the 'nscrledecode' function in versions prior to FreeRDP 2.0.0-rc4 can be exploited by a remote attacker to cause a denial of service memory...

9.8CVSS9.3AI score0.074EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/11/30 12:0 a.m.3 views

FreeRDP Buffer Overflow Vulnerability (CNVD-2019-00652)

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team. A heap buffer overflow vulnerability exists in the 'updatereadbitmapupdate' function in versions of FreeRDP prior to 2.0.0-rc4, which can be exploited by a remote attacker to cause a...

9.8CVSS8.9AI score0.08156EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/11/30 12:0 a.m.4 views

FreeRDP Buffer Overflow Vulnerability (CNVD-2019-00654)

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team. A heap buffer overflow vulnerability in the 'zgfxdecompresssegment' function in versions prior to FreeRDP 2.0.0-rc4 can be exploited by a remote attacker to cause a denial of service...

9.8CVSS8AI score0.07293EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/11/30 12:0 a.m.6 views

FreeRDP NTLM Authentication Module Out-of-Bounds Read Vulnerability

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team.NTLM Authentication module is one of the NTLM NT Lan Manager authentication modules. An out-of-bounds read vulnerability exists in the NTLM Authentication module in versions prior to...

7.5CVSS8.3AI score0.05238EPSS
SaveExploits1References1
NVD
NVD
added 2018/11/29 6:29 p.m.23 views

CVE-2018-8789

FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service segfault...

7.5CVSS7.5AI score0.05238EPSS
SaveExploits1References6
OSV
OSV
added 2018/11/29 6:29 p.m.24 views

CVE-2018-8789

FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service segfault...

7.5CVSS6.5AI score
SaveExploits0References6
NVD
NVD
added 2018/11/29 6:29 p.m.20 views

CVE-2018-8785

FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfxdecompress that results in a memory corruption and probably even a remote code execution...

9.8CVSS9.9AI score0.07293EPSS
SaveExploits1References4
Prion
Prion
added 2018/11/29 6:29 p.m.32 views

Design/Logic Flaw

FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service segfault...

5CVSS7.8AI score0.05238EPSS
SaveExploits1References6Affected Software3
Rows per page
Query Builder