PT-2020-2564

Name of the Vulnerable Software and Affected Versions FreeRDP versions 2.0.0 and earlier Description A possible resource exhaustion issue exists due to out of bound reads, potentially allowing malicious clients to trigger memory allocation with random size, leading to a denial of service. This...

PT-2020-2562

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.1.0 Description The issue is caused by a read of an invalid array index when FreeRDP is run with the logger set to "WLOG TRACE". This could lead to a possible application crash, and data could be printed as a string...

PT-2020-2557

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.1.0 Description The issue is caused by an integer overflow in the implementation of the FreeRDP protocol, allowing a remote attacker to impact the confidentiality and integrity of protected information. When using a...

PT-2020-2558

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.1.0 Description The issue is caused by an integer overflow in size calculation when using /video redirection, allowing a manipulated server to instruct the client to allocate a buffer with a smaller size than...

PT-2020-2561

Name of the Vulnerable Software and Affected Versions FreeRDP versions less than or equal to 2.0.0 Description The issue arises from an outside controlled array index being used unchecked for data used as configuration for the sound backend, such as alsa, oss, or pulse. This could lead to a crash...

PT-2020-3473

Name of the Vulnerable Software and Affected Versions FreeRDP versions 1.0 through 2.0.0-rc4 Description The issue is related to an out-of-bounds read in the libfreerdp/gdi/gdi.c file of FreeRDP. This can potentially allow a remote attacker to gain unauthorized access to protected information...

PT-2020-6517

Name of the Vulnerable Software and Affected Versions FreeRDP versions 1.0 through 2.0.0-rc4 Description The issue is related to an out of bounds read in the implementation of the FreeRDP protocol, which can be exploited by a remote attacker to cause a denial of service. Recommendations For FreeR...

PT-2020-3474

Name of the Vulnerable Software and Affected Versions FreeRDP versions 1.0 through 2.0.0-rc4 Description The issue is related to an out-of-bounds write operation in the memory buffer of the FreeRDP client. This can be exploited by a remote attacker to cause a denial of service. The problem is...

PT-2020-12510 · Freerdp +6 · Freerdp +6

Name of the Vulnerable Software and Affected Versions: FreeRDP versions 1.1 through 1.9 Description: The issue involves an out-of-bound read of client memory that is then passed on to the protocol parser. This has been patched in version 2.0.0. Recommendations: For versions 1.1 through 1.9, updat...

PT-2020-6920 · Freerdp +6 · Freerdp +6

Name of the Vulnerable Software and Affected Versions: FreeRDP versions 1.1 through 1.9 Description: The issue is related to an out-of-bounds read in the autodetect recv bandwidth measure results function. A malicious server can extract up to 8 bytes of client memory with a manipulated message by...

PT-2020-12519 · Freerdp +7 · Freerdp +7

Name of the Vulnerable Software and Affected Versions: FreeRDP versions 1.1 through 1.9 Description: A stream out-of-bounds seek in rdp read font capability set could lead to a later out-of-bounds read. As a result, a manipulated client or server might force a disconnect due to an invalid data...

PT-2020-6921 · Freerdp +6 · Freerdp +6

Name of the Vulnerable Software and Affected Versions: FreeRDP versions 1.2 through 1.2 simplified to FreeRDP versions greater than 1.2 and before 2.0.0 Description: The issue is related to a double free error in the update read cache bitmap v3 order function of the FreeRDP RDP client. This error...

PT-2020-12506 · Freerdp +6 · Freerdp +6

Name of the Vulnerable Software and Affected Versions: FreeRDP versions 1.1 through 1.9 Description: The issue is an out-of-bounds read in the update read icon info function. This allows an attacker to read a defined amount of client memory, up to 4GB, into an intermediate buffer. The impact can ...

Vulnerability of the zgfx_decompress() function in the RDP client FreeRDP, allowing a hacker to execute arbitrary code

The vulnerability of the zgfxdecompress function in the RDP client of FreeRDP arises from the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the NTLM authentication module in the RDP client FreeRDP allows a hacker to trigger a service failure.

The vulnerability of the NTLM authentication module in the RDP client FreeRDP arises from reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure remotely...

CVE-2019-17177

libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied realloc pointer i.e., the first argument to realloc is also used for a realloc return value...

Huawei EulerOS: Security Advisory for freerdp (EulerOS-SA-2019-2147)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for freerdp (EulerOS-SA-2019-2262)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for freerdp (EulerOS-SA-2019-1284)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for freerdp (EulerOS-SA-2019-1646)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...