FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvc_main.c, drdynvc_process_capability_request that can result in The RDP server can read the client's memory.. This attack appear to be exploitable via RDPClient must connect the rdp server with echo option. This vulnerability appears to have been fixed in after commit 205c612820dac644d665b5bb1cdf437dc5ca01e3.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade freerdpUpgrade libwinpr-develUpgrade libwinprUpgrade freerdp-develUpgrade freerdp-debuginfoUpgrade freerdp-libs | Apr 27, 2020 | Dec 20, 2018 |
| Centos_linux | — | Upgrade libwinpr-develUpgrade vinagreUpgrade vinagre-debuginfoUpgrade freerdp-debuginfoUpgrade freerdpUpgrade libwinprUpgrade freerdp-develUpgrade freerdp-libs | Aug 28, 2019 | Dec 20, 2018 |
| Debian | — | Upgrade freerdp2 | Jul 30, 2024 | Dec 20, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freerdpUpgrade freerdp-pluginsUpgrade freerdp-libs | Dec 4, 2019 | Dec 20, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freerdp-libsUpgrade freerdp-pluginsUpgrade freerdp | Dec 18, 2019 | Dec 20, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freerdpUpgrade freerdp-libsUpgrade libwinpr | Jun 27, 2019 | Dec 20, 2018 |
| Oracle_linux | — | Upgrade libwinprUpgrade freerdp-libsUpgrade libwinpr-develUpgrade vinagreUpgrade freerdpUpgrade freerdp-devel | Jul 21, 2020 | Sep 19, 2018 |
| Redhat_linux | — | No solution existsUpgrade freerdp-develUpgrade freerdp-libsUpgrade freerdp-debuginfoUpgrade libwinprUpgrade freerdpUpgrade vinagreUpgrade vinagre-debuginfoUpgrade libwinpr-devel | Aug 7, 2019 | Dec 20, 2018 |
| Suse | — | Upgrade libfreerdp2Upgrade libuwac0-0Upgrade freerdpUpgrade vinagreUpgrade freerdp-develUpgrade uwac0-0-develUpgrade freerdp-waylandUpgrade vinagre-langUpgrade libwinpr2Upgrade freerdp-proxyUpgrade winpr2-develUpgrade freerdp-server | Jan 22, 2019 | Dec 20, 2018 |
| Ubuntu | — | Upgrade libfreerdp-client2-2Upgrade libfreerdp2-2Upgrade libfreerdp-server2-2 | Jun 2, 2020 | Dec 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub