Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

freerdp: Out-of-bounds write in interleaved.c

A flaw was found in FreeRDP between versions 1.0 and 2.0.0. An out-of-bounds memory write was found in the interleaved.c function which could allow an attacker to take over and control the RDP server, including data sent to the client. The highest threat from this vulnerability is to data...

CentOS: Security Advisory for freerdp (CESA-2020:2334)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS 7 : freerdp (RHSA-2020:2334)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2334 advisory. - libfreerdp/codec/planar.c in FreeRDP version 1.0 through 2.0.0-rc4 has an Out-of-bounds Write. CVE-2020-11521 - libfreerdp/gdi/region.c in FreeRDP...

Scientific Linux Security Update : freerdp on SL7.x x86_64 (20200528)

Security Fixes : - freerdp: Out-of-bounds write in planar.c CVE-2020-11521 - freerdp: Integer overflow in region.c CVE-2020-11523 - freerdp: Out-of-bounds write in interleaved.c CVE-2020-11524 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if...

Ubuntu: Security Advisory (USN-4379-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 18.04 LTS / 20.04 LTS : FreeRDP vulnerabilities (USN-4379-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4379-1 advisory. It was discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could use this issue to cause FreeRDP to cras...

USN-4379-1 freerdp2 vulnerabilities

It was discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly exeucte arbitrary code...

USN-4379-1: FreeRDP vulnerabilities

It was discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly exeucte arbitrary code...

freerdp, libwinpr security update

CentOS Errata and Security Advisory CESA-2020:2334 An update for freerdp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31440)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in the 'irp' function in versions of FreeRDP prior to 2.1.0. The vulnerability stems from a networked system or product performing operations on memory without...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31438)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in ntlmreadAuthenticateMessage in FreeRDP 2.0.0 and prior versions. The vulnerability stems from a networked system or product performing operations in memory...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31439)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in ntlmreadNegotiateMessage in FreeRDP 2.0.0 and prior versions. The vulnerability stems from a network system or product performing operations in memory witho...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31437)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in cliprdrreadformatlist in versions prior to FreeRDP 2.0.0. The vulnerability stems from a network system or product performing operations in memory without...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31434)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in cleardecompresssubcoderlex in FreeRDP 2.0.0 and prior versions. The vulnerability stems from a network system or product performing operations in memory...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31435)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in rdpsndrecvwave2pdu in FreeRDP 2.0.0 and prior versions. The vulnerability stems from a network system or product performing operations in memory without...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31436)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in cliprdrreadformatlist in versions prior to FreeRDP 2.0.0. The vulnerability stems from a network system or product performing operations in memory without...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31430)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in FreeRDP 2.0.0 and prior versions, which stems from the program reading an invalid array index when the logger is set to 'WLOGTRACE'. An attacker can exploit...

FreeRDP Input Validation Error Vulnerability (CNVD-2020-31432)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. An input validation error vulnerability exists in the USB redirection channel in FreeRDP 2.0.0 and prior versions. An attacker can exploit this vulnerability to read or write arbitrary memory...

FreeRDP Input Validation Error Vulnerability (CNVD-2020-31431)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A security vulnerability exists in FreeRDP 2.0.0 and earlier versions. An attacker could exploit the vulnerability to allow the server to manipulate the client in order to write out data bound to a...