FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress() that results in a memory corruption and probably even a remote code execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade freerdp2 | Jul 30, 2024 | Nov 29, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libwinprUpgrade freerdp-libsUpgrade freerdp | Jun 27, 2019 | Nov 29, 2018 |
| Suse | — | Upgrade uwac0-0-develUpgrade freerdp-proxyUpgrade freerdp-serverUpgrade vinagre-langUpgrade freerdp-develUpgrade freerdp-waylandUpgrade libwinpr2Upgrade libuwac0-0Upgrade freerdpUpgrade vinagreUpgrade winpr2-develUpgrade libfreerdp2 | Jan 22, 2019 | Nov 29, 2018 |
| Ubuntu | — | Upgrade libfreerdp2-2Upgrade libfreerdp-client1.1Upgrade libfreerdp-client2-2Upgrade libfreerdp1 | Jan 10, 2019 | Nov 29, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub