FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvc_main.c, drdynvc_process_capability_request that can result in The RDP server can read the client's memory.. This attack appear to be exploitable via RDPClient must connect the rdp server with echo option. This vulnerability appears to have been fixed in after commit 205c612820dac644d665b5bb1cdf437dc5ca01e3.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libwinpr-develUpgrade freerdpUpgrade freerdp-debuginfoUpgrade freerdp-libsUpgrade freerdp-develUpgrade libwinpr | Apr 27, 2020 | Dec 20, 2018 |
| Centos_linux | — | Upgrade freerdp-libsUpgrade libwinprUpgrade freerdp-develUpgrade vinagreUpgrade libwinpr-develUpgrade vinagre-debuginfoUpgrade freerdpUpgrade freerdp-debuginfo | Aug 28, 2019 | Dec 20, 2018 |
| Debian | — | Upgrade freerdp2 | Jul 30, 2024 | Dec 20, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freerdp-libsUpgrade freerdpUpgrade freerdp-plugins | Dec 4, 2019 | Dec 20, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freerdp-libsUpgrade freerdp-pluginsUpgrade freerdp | Dec 18, 2019 | Dec 20, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freerdpUpgrade libwinprUpgrade freerdp-libs | Jun 27, 2019 | Dec 20, 2018 |
| Oracle_linux | — | Upgrade freerdp-libsUpgrade libwinprUpgrade libwinpr-develUpgrade freerdpUpgrade freerdp-develUpgrade vinagre | Jul 21, 2020 | Sep 19, 2018 |
| Redhat_linux | — | Upgrade freerdpUpgrade libwinpr-develUpgrade vinagreUpgrade vinagre-debuginfoUpgrade freerdp-libsUpgrade libwinprUpgrade freerdp-develUpgrade freerdp-debuginfoNo solution exists | Aug 7, 2019 | Dec 20, 2018 |
| Suse | — | Upgrade winpr2-develUpgrade freerdp-develUpgrade freerdp-proxyUpgrade freerdp-serverUpgrade freerdp-waylandUpgrade uwac0-0-develUpgrade vinagre-langUpgrade libwinpr2Upgrade vinagreUpgrade libuwac0-0Upgrade libfreerdp2Upgrade freerdp | Jan 22, 2019 | Dec 20, 2018 |
| Ubuntu | — | Upgrade libfreerdp-server2-2Upgrade libfreerdp2-2Upgrade libfreerdp-client2-2 | Jun 2, 2020 | Dec 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub