CVE-2020-15103

CVE-2020-15103 affects FreeRDP with versions

CVE-2020-15103

In FreeRDP less than or equal to 2.1.2, an integer overflow exists due to missing input sanitation in rdpegfx channel. All FreeRDP clients are affected. The input rectangles from the server are not checked against local surface coordinates and blindly accepted. A malicious server can send data th...

OPENSUSE-SU-2020:1090-1 Security update for freerdp

This update for freerdp fixes the following issues: frerdp was updated to version 2.1.2 bsc1171441,bsc1173247 and jscECO-2006: - CVE-2020-11017: Fixed a double free which could have denied the server's service. - CVE-2020-11018: Fixed an out of bounds read which a malicious clients could have...

SUSE-SU-2020:2032-1 Security update for freerdp

This update for freerdp fixes the following issues: frerdp was updated to version 2.1.2 bsc1171441,bsc1173247 and jscECO-2006: - CVE-2020-11017: Fixed a double free which could have denied the server's service. - CVE-2020-11018: Fixed an out of bounds read which a malicious clients could have...

Security fix for the ALT Linux 9 package freerdp version 2.2.0-alt1

2.2.0-alt1 built July 23, 2020 Andrey Cherepanov in task 255257 July 21, 2020 Andrey Cherepanov - New version. - Fixes: + CVE-2020-15103 - Integer overflow due to missing input sanitation in rdpegfx channel...

CVE-2020-15103

In FreeRDP less than or equal to 2.1.2, an integer overflow exists due to missing input sanitation in rdpegfx channel. All FreeRDP clients are affected. The input rectangles from the server are not checked against local surface coordinates and blindly accepted. A malicious server can send data th...

Fedora: Security Advisory for freerdp (FEDORA-2020-a3ef998a70)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for freerdp (FEDORA-2020-dd8c133829)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 31 Update: xrdp-0.9.13.1-1.fc31

xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...

Fedora 31 : 2:freerdp / remmina (2020-dd8c133829)

Remmina 1.4.7 and FreeRDP 2.1.2 to fix many bugs and CVEs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 32 : 2:freerdp / remmina (2020-a3ef998a70)

Remmina 1.4.7 and FreeRDP 2.1.2 to fix many bugs and CVEs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

CVE-2020-11099

In FreeRDP before version 2.1.2, there is an out of bounds read in licensereadneworupgradelicensepacket. A manipulated license packet can lead to out of bound reads to an internal buffer. This is fixed in version 2.1.2...

CVE-2020-4030

In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks due to an integer overflow. This is fixed in version 2.1.2...

CVE-2020-11097

In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARYDRAWINGORDERFIELDBYTES. This is fixed in version 2.1.2...

CVE-2020-4033

In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS. All FreeRDP based clients with sessions with color depth 32 are affected. This is fixed in version 2.1.2. Mitigation Set the color depth to 32 with the client commandline option: /bpp:32...

CVE-2020-4031

In FreeRDP before version 2.1.2, there is a use-after-free in gdiSelectObject. All FreeRDP clients using compatibility mode with /relax-order-checks are affected. This is fixed in version 2.1.2...

CVE-2020-11096

In FreeRDP before version 2.1.2, there is a global OOB read in updatereadcachebitmapv3order. As a workaround, one can disable bitmap cache with -bitmap-cache default. This is fixed in version 2.1.2. Mitigation Do not enable the +bitmap-cache option in the freerdp client. Alternatively, the...

CVE-2020-11098

In FreeRDP before version 2.1.2, there is an out-of-bound read in glyphcacheput. This affects all FreeRDP clients with +glyph-cache option enabled This is fixed in version 2.1.2. Mitigation Do not use the +glyphcache option in the freerdp client, which is disabled by default in freerdp-2.0.0.rc4...

CVE-2020-11095

In FreeRDP before version 2.1.2, an out of bound reads occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARYDRAWINGORDERFIELDBYTES. This is fixed in version 2.1.2...

Arbitrary Code Execution

guacamole is vulnerable to arbitrary code execution. The vulnerability exists due to a memory corruption issue occurs in guacrdpcommonsvchandleopenevent of guac-common-svc/guac-common-svc.c, when a large stream is sent without the CHANNELFLAGFIRST flag, causing the FreeRDP stream length to be...