An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle attack to trigger this vulnerability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade freerdp | Aug 2, 2017 | Aug 1, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade freerdp-libsUpgrade freerdp-pluginsUpgrade freerdp | Feb 4, 2021 | Apr 24, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 24, 2018 |
| Suse | — | Upgrade libwinpr2Upgrade freerdp-serverUpgrade freerdp-develUpgrade freerdp-proxyUpgrade vinagreUpgrade winpr2-develUpgrade freerdpUpgrade libfreerdp2Upgrade vinagre-lang | Aug 23, 2017 | Aug 1, 2017 |
| Ubuntu | — | Upgrade libfreerdp1Upgrade libfreerdp-client1.1 | Aug 7, 2017 | Aug 1, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub