Lucene search

K
ubuntuUbuntuUSN-4382-2
HistoryNov 26, 2020 - 12:00 a.m.

FreeRDP vulnerabilities

2020-11-2600:00:00
ubuntu.com
66

8.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

7.6 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

88.7%

Releases

  • Ubuntu 18.04 ESM

Packages

  • freerdp - RDP client for Windows Terminal Services

Details

It was discovered that FreeRDP incorrectly handled certain memory
operations. A remote attacker could use this issue to cause FreeRDP to
crash, resulting in a denial of service, or possibly execute arbitrary
code.

OSVersionArchitecturePackageVersionFilename
Ubuntu18.04noarchlibfreerdp-client1.1< 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2UNKNOWN
Ubuntu18.04noarchfreerdp-x11< 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2UNKNOWN
Ubuntu18.04noarchfreerdp-x11-dbgsym< 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2UNKNOWN
Ubuntu18.04noarchlibfreerdp-cache1.1< 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2UNKNOWN
Ubuntu18.04noarchlibfreerdp-cache1.1-dbgsym< 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2UNKNOWN
Ubuntu18.04noarchlibfreerdp-client1.1-dbgsym< 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2UNKNOWN
Ubuntu18.04noarchlibfreerdp-codec1.1< 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2UNKNOWN
Ubuntu18.04noarchlibfreerdp-codec1.1-dbgsym< 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2UNKNOWN
Ubuntu18.04noarchlibfreerdp-common1.1.0< 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2UNKNOWN
Ubuntu18.04noarchlibfreerdp-common1.1.0-dbgsym< 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2UNKNOWN
Rows per page:
1-10 of 901

8.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

7.6 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

88.7%