In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bound read in in update_read_bitmap_data that allows client memory to be read to an image buffer. The result displayed on screen as colour.
CVSS Details
- CVSS 3.1 Base Score: 2.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freerdp-develUpgrade vinagre | May 4, 2022 | May 7, 2020 |
| Amazon Linux Ami 2 | — | Upgrade libwinpr-develUpgrade freerdp-libsUpgrade libwinprUpgrade freerdpUpgrade freerdp-develUpgrade freerdp-debuginfo | Oct 28, 2020 | May 7, 2020 |
| Centos_linux | — | Upgrade vinagreUpgrade libwinpr-develUpgrade freerdpUpgrade vinagre-debuginfoUpgrade libwinpr-debuginfoUpgrade freerdp-debugsourceUpgrade vinagre-debugsourceUpgrade freerdp-libs-debuginfoUpgrade freerdp-develUpgrade freerdp-debuginfoUpgrade libwinprUpgrade freerdp-libs | Oct 1, 2020 | May 7, 2020 |
| Debian | — | Upgrade freerdp2 | Aug 31, 2020 | May 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freerdpUpgrade freerdp-pluginsUpgrade freerdp-libs | Feb 22, 2021 | May 7, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freerdpUpgrade freerdp-libsUpgrade freerdp-plugins | Jan 20, 2021 | May 7, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade freerdpUpgrade freerdp-pluginsUpgrade freerdp-libs | Feb 3, 2021 | May 7, 2020 |
| Oracle_linux | — | Upgrade libwinpr-develUpgrade libwinprUpgrade freerdpUpgrade vinagreUpgrade freerdp-libsUpgrade freerdp-devel | Oct 7, 2020 | Mar 30, 2020 |
| Redhat_linux | — | Upgrade libwinpr-develUpgrade vinagreUpgrade freerdp-debugsourceUpgrade vinagre-debugsourceUpgrade freerdpUpgrade vinagre-debuginfoUpgrade freerdp-libs-debuginfoUpgrade freerdp-debuginfoUpgrade libwinpr-debuginfoUpgrade libwinprUpgrade freerdp-libsNo solution existsUpgrade freerdp-devel | Oct 1, 2020 | May 7, 2020 |
| Rocky_linux | — | Upgrade vinagreUpgrade vinagre-debuginfoUpgrade vinagre-debugsource | Mar 12, 2024 | May 7, 2020 |
| Ubuntu | — | Upgrade libfreerdp-core1.1Upgrade libfreerdp-client1.1Upgrade libfreerdp2-2Upgrade libfreerdp-client2-2Upgrade libfreerdp-server2-2Upgrade libfreerdp-common1.1.0 | Jun 2, 2020 | May 7, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub