FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service (segfault).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade freerdpUpgrade freerdp2 | Apr 22, 2019 | Nov 29, 2018 |
| Debian | — | Upgrade freerdp2 | Feb 20, 2019 | Nov 29, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freerdpUpgrade freerdp-libsUpgrade libwinpr | Jun 27, 2019 | Nov 29, 2018 |
| Suse | — | Upgrade freerdpUpgrade freerdp-develUpgrade vinagreUpgrade libwinpr2Upgrade libuwac0-0Upgrade freerdp-waylandUpgrade winpr2-develUpgrade uwac0-0-develUpgrade freerdp-serverUpgrade vinagre-langUpgrade freerdp-proxyUpgrade libfreerdp2 | Jan 22, 2019 | Nov 29, 2018 |
| Ubuntu | — | Upgrade libfreerdp-client1.1Upgrade libfreerdp2-2Upgrade libfreerdp-client2-2Upgrade libfreerdp1 | Jan 10, 2019 | Nov 29, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub