OESA-2022-2112 freerdp security update

FreeRDP is a client implementation of the Remote Desktop Protocol RDP that follows Microsoft's open specifications. This package provides the client applications xfreerdp and wlfreerdp. Security Fixes: FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are...

CVE-2022-39346 Missing length validation of user displayname in nextcloud server

Nextcloud server is an open source personal cloud server. Affected versions of nextcloud server did not properly limit user display names which could allow a malicious users to overload the backing database and cause a denial of service. It is recommended that the Nextcloud Server is upgraded to...

D-Link DIR-882 websRedirect function buffer overflow vulnerability

D-Link DIR-882 is a wireless router from D-Link, China. D-Link DIR-882 firmware versions 1.10B02 and 1.20B06 contain a buffer overflow vulnerability that stems from the lack of length validation of input data by its websRedirect function, which could be exploited by an attacker to cause a denial ...

NETGEAR R7000P wan_dns1_pri Buffer Overflow Vulnerability

The NETGEAR R7000P is a wireless router from NETGEAR. A buffer overflow vulnerability exists in NETGEAR R7000P version V1.3.1.64, which originates from a lack of length validation of data entered in /usr/sbin/httpd for the wandns1pri parameter, and can be exploited by an attacker to cause a denia...

D-Link DIR-882 webGetVarString function buffer overflow vulnerability

D-Link DIR-882 is a wireless router from D-Link, China. D-Link DIR-882 firmware versions 1.10B02 and 1.20B06 contain a buffer overflow vulnerability that stems from a lack of length validation of input data in its webGetVarString function, which could be exploited to cause a denial of service or...

NETGEAR R7000P enable_band_steering buffer overflow vulnerability

NETGEAR R7000P is a wireless router from NETGEAR, Inc. NETGEAR R7000P version V1.3.1.64 has a buffer overflow vulnerability, which originates from the lack of length validation of input data in the enablebandsteering parameter, and can be exploited by attackers to cause a denial of service or...

D-Link DIR-882 sub_46D180 function buffer overflow vulnerability

D-Link DIR-882 is a wireless router from D-Link, China. D-Link DIR-882 firmware versions 1.10B02 and 1.20B06 contain a buffer overflow vulnerability that stems from the lack of length validation of input data in the sub46D180 function wanwanphyifname parameter, which could be exploited by an...

NETGEAR R7000P stamode_dns1_pri/stamode_dns1_sec buffer overflow vulnerability

NETGEAR R7000P is a wireless router from NETGEAR, Inc. A buffer overflow vulnerability exists in NETGEAR R7000P versions V1.3.0.8 and V1.3.1.64, which stems from a lack of length validation of data entered for the stamodedns1pri and stamodedns1sec parameters, which could be exploited by an attack...

Out Of Bound Reads

freerdp is vulnerable to Out Of Bound Reads. The vulnerability exists due to missing input length validation in drive channel which allows an attacker to gain access to the system...

D-Link DIR-823G 缓冲区错误漏洞

The D-Link DIR-823G is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in D-Link DIR-823G firmware versions 1.02B04 and 1.02B05, which stems from a lack of length validation of input data in the sub4883F0 function, and can be exploited by an attacker to cause a...

NETGEAR R7000P 缓冲区错误漏洞

NETGEAR R7000P is a wireless router from NETGEAR, Inc. NETGEAR R7000P version V1.3.1.64 is vulnerable to a buffer overflow vulnerability that originates from the lack of length validation of input data for the KEY1 and KEY2 parameters, which could be exploited to launch a denial of service or...

Microsoft PowerPoint FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft PowerPoint. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

CVE-2022-41877

An out-of-bounds read vulnerability was discovered in FreeRDP due to improper input length validation in the drive channel. A malicious server can trick a FreeRDP based client to read out-of-bound data and send it back to the server. Mitigation Do not use the drive redirection channel - command...

DEBIAN-CVE-2022-39319

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in the urbdrc channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in...

DEBIAN-CVE-2022-41877

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in drive channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version...

Design/Logic Flaw

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in drive channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version...

UBUNTU-CVE-2022-41877

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in drive channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version...

FreeRDP 缓冲区错误漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP by the FreeRDP team. FreeRDP suffers from a buffer error vulnerability that stems from a lack of input length validation in the "urbdrc" channel...

CVE-2022-39319 Missing length validation in urbdrc channel in FreeRDP

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in the urbdrc channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in...

CVE-2022-41877 Missing input length validation in `drive` channel in FreeRDP

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in drive channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version...