FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvc_main.c, drdynvc_process_capability_request that can result in The RDP server can read the client's memory.. This attack appear to be exploitable via RDPClient must connect the rdp server with echo option. This vulnerability appears to have been fixed in after commit 205c612820dac644d665b5bb1cdf437dc5ca01e3.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libwinpr-develUpgrade freerdpUpgrade freerdp-develUpgrade freerdp-libsUpgrade freerdp-debuginfoUpgrade libwinpr | Apr 27, 2020 | Dec 20, 2018 |
| Centos_linux | — | Upgrade vinagre-debuginfoUpgrade vinagreUpgrade libwinpr-develUpgrade freerdp-debuginfoUpgrade freerdpUpgrade libwinprUpgrade freerdp-libsUpgrade freerdp-devel | Aug 28, 2019 | Dec 20, 2018 |
| Debian | — | Upgrade freerdp2 | Jul 30, 2024 | Dec 20, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freerdpUpgrade freerdp-pluginsUpgrade freerdp-libs | Dec 4, 2019 | Dec 20, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freerdpUpgrade freerdp-libsUpgrade freerdp-plugins | Dec 18, 2019 | Dec 20, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freerdpUpgrade libwinprUpgrade freerdp-libs | Jun 27, 2019 | Dec 20, 2018 |
| Oracle_linux | — | Upgrade libwinpr-develUpgrade freerdp-develUpgrade vinagreUpgrade freerdpUpgrade freerdp-libsUpgrade libwinpr | Jul 21, 2020 | Sep 19, 2018 |
| Redhat_linux | — | Upgrade freerdpUpgrade libwinpr-develUpgrade vinagre-debuginfoUpgrade vinagreUpgrade freerdp-debuginfoUpgrade freerdp-develUpgrade freerdp-libsNo solution existsUpgrade libwinpr | Aug 7, 2019 | Dec 20, 2018 |
| Suse | — | Upgrade vinagre-langUpgrade freerdp-waylandUpgrade freerdp-proxyUpgrade winpr2-develUpgrade freerdp-develUpgrade uwac0-0-develUpgrade freerdp-serverUpgrade libwinpr2Upgrade freerdpUpgrade libfreerdp2Upgrade libuwac0-0Upgrade vinagre | Jan 22, 2019 | Dec 20, 2018 |
| Ubuntu | — | Upgrade libfreerdp-client2-2Upgrade libfreerdp2-2Upgrade libfreerdp-server2-2 | Jun 2, 2020 | Dec 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub