openSUSE Security Update : freerdp (openSUSE-2016-1131)

This update for freerdp fixes the following issues : Security issues fixed : - CVE-2013-4118: Add a NULL pointer check to fix a server crash boo829013. - CVE-2014-0791: The remaining length in the stream is checked before doing some malloc, which could have lead to crashes. boo857491. %NASLMINLEV...

PT-2018-3361

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.0.0-rc4 Description: The issue is related to Out-Of-Bounds Reads in the NTLM Authentication module, which can result in a Denial of Service. This is caused by a buffer overflow read in the memory. An attacker could...

PT-2018-3040

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.0.0-rc4 Description The issue is caused by an Integer Overflow in the gdi Bitmap Decompress function, leading to a Heap-Based Buffer Overflow. This results in memory corruption and potentially allows for remote code...

PT-2018-3041

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.0.0-rc4 Description The issue is related to an Out-Of-Bounds Write of up to 4 bytes in the nsc rle decode function, resulting in memory corruption and potentially allowing for remote code execution. This can be...

PT-2018-3362

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.0.0-rc4 Description: The issue is related to a Heap-Based Buffer Overflow in the zgfx decompress function, which can cause memory corruption and potentially allow for remote code execution. The vulnerability can be...

PT-2018-3363

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.0.0-rc4 Description: The issue is related to a Heap-Based Buffer Overflow in the zgfx decompress segment function, which can cause memory corruption and potentially allow for remote code execution. The vulnerabilit...

PT-2018-2491

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.0.0-rc4 Description The issue is caused by an integer truncation leading to a heap-based buffer overflow in the update read bitmap update function, resulting in memory corruption and potentially allowing remote code...

PT-2020-12509 · Freerdp +7 · Freerdp +7

Name of the Vulnerable Software and Affected Versions: FreeRDP versions 1.0 through 1.9 Description: The issue is an out-of-bounds read that can only be used to abort a session, with no possibility of data extraction. Recommendations: For FreeRDP versions 1.0 through 1.9, update to version 2.0.0 ...

PT-2020-12508 · Freerdp +7 · Freerdp +7

Name of the Vulnerable Software and Affected Versions: FreeRDP versions 1.0 through 2.0.0 Description: The issue is related to a stream out-of-bounds seek in the update read synchronize function, which could lead to a later out-of-bounds read. Recommendations: For FreeRDP versions 1.0 through...

Gentoo Security Advisory GLSA 201412-18

Gentoo Linux Local Security Checks GLSA 201412-18 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

FreeRDP integer overflow

Integer overflow on server response parsing...

[ MDVSA-2015:171 ] freerdp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:171 http://www.mandriva.com/en/support/security/ Package : freerdp Date : March 30, 2015 Affected: Business Server 2.0 Problem Description: Updated freerdp packages fix security vulnerabilities: Integer...

PT-2016-3475

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 1.1.0-beta+2013071101 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, by disconnecting before authentication has finished...

PT-2016-3474

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 1.1.0-beta1 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via unspecified vectors. Recommendations For versions prior to...

PT-2019-5420

Name of the Vulnerable Software and Affected Versions FreeRDP versions 1.1.x through 2.0.0-rc4 Description The issue is related to memory leaks in the FreeRDP implementation due to improper handling of a supplied realloc pointer. This can lead to a denial of service. The estimated number of...

Mandriva Linux Security Advisory : freerdp (MDVSA-2015:171)

Updated freerdp packages fix security vulnerabilities : Integer overflows in memory allocations in client/X11/xfgraphics.c in FreeRDP through 1.0.2 allows remote RDP servers to have an unspecified impact through unspecified vectors CVE-2014-0250. Integer overflow in the licensereadscopelist...

GLSA-201412-18 : FreeRDP: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201412-18 FreeRDP: User-assisted execution of arbitrary code FreeRDP does not properly validate user-supplied input, which could lead to an integer overflow in the xfPointerNew function. Impact : A remote attacker could execute...

FreeRDP: User-assisted execution of arbitrary code

Background FreeRDP is a free implementation of the remote desktop protocol. Description FreeRDP does not properly validate user-supplied input, which could lead to an integer overflow in the xfPointerNew function. Impact A remote attacker could execute arbitrary code with the privileges of the...

CVE-2014-0250

Multiple integer overflows in client/X11/xfgraphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the 1 xfPointerNew or 2 xfBitmapDecompress function, which causes an incorrect amount of memory to be allocated...

Integer overflow

Multiple integer overflows in client/X11/xfgraphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the 1 xfPointerNew or 2 xfBitmapDecompress function, which causes an incorrect amount of memory to be allocated...