CVE-2013-4118

FreeRDP before 1.1.0-beta1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via unspecified vectors...

CVE-2013-4119

CVE-2013-4119 affects FreeRDP prior to 1.1.0-beta+2013071101. Exploitation allows remote attackers to trigger a denial of service (NULL pointer dereference and application crash) by disconnecting before authentication finishes. Multiple connected sources (vendor advisories and third‑party feeds) ...

CVE-2013-4119: NULL Pointer Dereference

FreeRDP before 1.1.0-beta+2013071101 allows remote attackers to cause a denial of service NULL pointer dereference and application crash by disconnecting before authentication has finished...

CVE-2013-4118: NULL Pointer Dereference

FreeRDP before 1.1.0-beta1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via unspecified vectors...

openSUSE Security Update : freerdp (openSUSE-2016-1132)

This update for freerdp fixes the following issues : Security issues fixed : - CVE-2013-4118: Add a NULL pointer check to fix a server crash boo829013. - CVE-2014-0791: The remaining length in the stream is checked before doing some malloc, which could have lead to crashes. boo857491. %NASLMINLEV...

openSUSE Security Update : freerdp (openSUSE-2016-1131)

This update for freerdp fixes the following issues : Security issues fixed : - CVE-2013-4118: Add a NULL pointer check to fix a server crash boo829013. - CVE-2014-0791: The remaining length in the stream is checked before doing some malloc, which could have lead to crashes. boo857491. %NASLMINLEV...

PT-2018-3041

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.0.0-rc4 Description The issue is related to an Out-Of-Bounds Write of up to 4 bytes in the nsc rle decode function, resulting in memory corruption and potentially allowing for remote code execution. This can be...

PT-2018-3362

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.0.0-rc4 Description: The issue is related to a Heap-Based Buffer Overflow in the zgfx decompress function, which can cause memory corruption and potentially allow for remote code execution. The vulnerability can be...

PT-2018-3361

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.0.0-rc4 Description: The issue is related to Out-Of-Bounds Reads in the NTLM Authentication module, which can result in a Denial of Service. This is caused by a buffer overflow read in the memory. An attacker could...

PT-2018-3363

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.0.0-rc4 Description: The issue is related to a Heap-Based Buffer Overflow in the zgfx decompress segment function, which can cause memory corruption and potentially allow for remote code execution. The vulnerabilit...

PT-2018-3040

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.0.0-rc4 Description The issue is caused by an Integer Overflow in the gdi Bitmap Decompress function, leading to a Heap-Based Buffer Overflow. This results in memory corruption and potentially allows for remote code...

PT-2020-12508 · Freerdp +7 · Freerdp +7

Name of the Vulnerable Software and Affected Versions: FreeRDP versions 1.0 through 2.0.0 Description: The issue is related to a stream out-of-bounds seek in the update read synchronize function, which could lead to a later out-of-bounds read. Recommendations: For FreeRDP versions 1.0 through...

PT-2018-2491

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.0.0-rc4 Description The issue is caused by an integer truncation leading to a heap-based buffer overflow in the update read bitmap update function, resulting in memory corruption and potentially allowing remote code...

PT-2020-12509 · Freerdp +7 · Freerdp +7

Name of the Vulnerable Software and Affected Versions: FreeRDP versions 1.0 through 1.9 Description: The issue is an out-of-bounds read that can only be used to abort a session, with no possibility of data extraction. Recommendations: For FreeRDP versions 1.0 through 1.9, update to version 2.0.0 ...

Gentoo Security Advisory GLSA 201412-18

Gentoo Linux Local Security Checks GLSA 201412-18 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

FreeRDP integer overflow

Integer overflow on server response parsing...

[ MDVSA-2015:171 ] freerdp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:171 http://www.mandriva.com/en/support/security/ Package : freerdp Date : March 30, 2015 Affected: Business Server 2.0 Problem Description: Updated freerdp packages fix security vulnerabilities: Integer...

PT-2016-3474

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 1.1.0-beta1 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via unspecified vectors. Recommendations For versions prior to...

PT-2016-3475

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 1.1.0-beta+2013071101 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, by disconnecting before authentication has finished...

PT-2019-5420

Name of the Vulnerable Software and Affected Versions FreeRDP versions 1.1.x through 2.0.0-rc4 Description The issue is related to memory leaks in the FreeRDP implementation due to improper handling of a supplied realloc pointer. This can lead to a denial of service. The estimated number of...