FreeRDP Buffer Overflow Vulnerability (CNVD-2020-35691)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in versions prior to FreeRDP 2.1.2. The vulnerability stems from a networked system or product performing operations in memory without properly validating data...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-35689)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in versions prior to FreeRDP 2.1.2. The vulnerability stems from a networked system or product performing operations in memory without properly validating data...

UBUNTU-CVE-2020-4033

In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS. All FreeRDP based clients with sessions with color depth 32 are affected. This is fixed in version 2.1.2...

UBUNTU-CVE-2020-11098

In FreeRDP before version 2.1.2, there is an out-of-bound read in glyphcacheput. This affects all FreeRDP clients with +glyph-cache option enabled This is fixed in version 2.1.2...

The vulnerability of the FreeRDP remote desktop protocol lies in the fact that resources are not released after their useful life has ended. This allows a malicious actor to cause service failures.

The vulnerability of the FreeRDPr remote desktop protocol implementation is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability allows a malicious actor to cause service failures...

CVE-2020-9332

ftusbbus2.sys in FabulaTech USB for Remote Desktop through 2020-02-19 allows privilege escalation via crafted IoCtl code related to a USB HID device...

CVE-2020-9332

ftusbbus2.sys in FabulaTech USB for Remote Desktop through 2020-02-19 allows privilege escalation via crafted IoCtl code related to a USB HID device...

CVE-2020-9332

ftusbbus2.sys in FabulaTech USB for Remote Desktop through 2020-02-19 allows privilege escalation via crafted IoCtl code related to a USB HID device...

CVE-2020-9332

The CVE-2020-9332 entry concerns ftusbbus2.sys in FabulaTech USB for Remote Desktop (through 2020-02-19). The vulnerability enables privilege escalation via a crafted IOCTL code related to a USB HID device, exposing local escalation risk via the USB driver component. Affected component: ftusbbus2...

UBUNTU-CVE-2020-14404

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rre.c allows out-of-bounds access via encodings...

Cannot renew Remote Desktop Cal on MacBook

In VDA server, if MacBook Device name longer than 15 characters, there is an issue on renew RDS cals License. The eventlog has a 1028 warning with TerminalService-RemoteConnectionManger. Hence the user cannot use the XenApp normally...

The science behind Microsoft Threat Protection: Attack modeling for finding and stopping evasive ransomware

The linchpin of successful cyberattacks, exemplified by nation state-level attacks and human-operated ransomware, is their ability to find the path of least resistance and progressively move across a compromised network. Determining the full scope and impact of these attacks is one the most...

June 9, 2020—KB4557957 (OS Build 19041.329)

None None...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CentOS: Security Advisory for freerdp (CESA-2020:2406)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Huawei Data Communication: RCE Vulnerabilities in Some Microsoft Windows Systems (huawei-sa-20190819-01-windows)

Microsoft released a security advisory to disclose four remote code execution RCE vulnerabilities in Remote Desktop Services. This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced...

RHEL 8 : freerdp (RHSA-2020:2407)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2407 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP server...

The vulnerability of the `clear_decompress_subcode_rlex` function in the FreeRDP remote desktop protocol allows a intruder to trigger a service failure.

The vulnerability of the cleardecompresssubcoderlex function in the FreeRDP remote desktop protocol is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the rfx_process_message_tileset function in the implementation of the remote desktop protocol FreeRDP allows a intruder to cause a service failure.

The vulnerability of the rfxprocessmessagetileset function in the implementation of the remote desktop protocol FreeRDP is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...