The vulnerability of the FreeRDP remote desktop protocol, caused by a full integer overflow, allows an attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the FreeRDP remote desktop protocol is caused by a numerical overflow condition. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of the FreeRDP remote desktop protocol, caused by indexing errors, allows a hacker to trigger a service failure or a client-side malfunction, resulting in the absence or distortion of sound.

The vulnerability of the FreeRDP remote desktop protocol is caused by indexing errors. Exploiting this vulnerability allows a malicious actor to cause service failures or malfunctions in the client-side component, resulting in the absence or distortion of audio signals...

Remote Code Execution

freerdp is vulnerable to remote code execution. The vulnerability exists as an Out-Of-Bounds Write of up to 4 bytes in function nscrledecode that results in a memory corruption and possibly even a remote code execution...

Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The vulnerability exists as freerdp prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service segfault...

Remote Code Execution

freerdp is vulnerable to remote code execution. The vulnerability exists as FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdiBitmapDecompress and results in a memory corruption and probably even a remote code execution...

RHEL 8 : freerdp (RHSA-2020:2354)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2354 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to R...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

freerdp: Integer overflow in region.c

A flaw was found in FreeRDP in versions between 1.0 and 2.0.0. An integer overflow was found in the region.c function which could allow an attacker the ability to control the RDP server as well as the data sent to the client. The highest threat from this vulnerability is to data confidentiality a...

freerdp: Out-of-bounds write in planar.c

A flaw was found in freerdp in versions between 1.0 and 2.0.0. An out-of-bounds memory write was found in the planar.c function which could allow an attacker to control data sent from the RDP server to the client. The highest threat from this vulnerability is to data confidentiality and integrity...

freerdp: Out-of-bounds write in interleaved.c

A flaw was found in FreeRDP between versions 1.0 and 2.0.0. An out-of-bounds memory write was found in the interleaved.c function which could allow an attacker to take over and control the RDP server, including data sent to the client. The highest threat from this vulnerability is to data...

Scientific Linux Security Update : freerdp on SL7.x x86_64 (20200528)

Security Fixes : - freerdp: Out-of-bounds write in planar.c CVE-2020-11521 - freerdp: Integer overflow in region.c CVE-2020-11523 - freerdp: Out-of-bounds write in interleaved.c CVE-2020-11524 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if...

CentOS: Security Advisory for freerdp (CESA-2020:2334)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS 7 : freerdp (RHSA-2020:2334)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2334 advisory. - libfreerdp/codec/planar.c in FreeRDP version 1.0 through 2.0.0-rc4 has an Out-of-bounds Write. CVE-2020-11521 - libfreerdp/gdi/region.c in FreeRDP...

Ubuntu 18.04 LTS / 20.04 LTS : FreeRDP vulnerabilities (USN-4379-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4379-1 advisory. It was discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could use this issue to cause FreeRDP to cras...

Ubuntu: Security Advisory (USN-4379-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4379-1: FreeRDP vulnerabilities

It was discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly exeucte arbitrary code...

USN-4379-1 freerdp2 vulnerabilities

It was discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly exeucte arbitrary code...

freerdp, libwinpr security update

CentOS Errata and Security Advisory CESA-2020:2334 An update for freerdp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31438)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in ntlmreadAuthenticateMessage in FreeRDP 2.0.0 and prior versions. The vulnerability stems from a networked system or product performing operations in memory...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31435)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in rdpsndrecvwave2pdu in FreeRDP 2.0.0 and prior versions. The vulnerability stems from a network system or product performing operations in memory without...