The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a manipulated server can instruct the client to allocate a buffer with a smaller size than requested due to an integer overflow in size calculation. With later messages, the server can manipulate the client to write data out of bound to the previously allocated buffer. This has been patched in 2.1.0.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade vinagreUpgrade freerdp-devel | May 4, 2022 | May 29, 2020 |
| Amazon Linux Ami 2 | — | Upgrade freerdp-libsUpgrade libwinprUpgrade freerdp-debuginfoUpgrade libwinpr-develUpgrade freerdpUpgrade freerdp-devel | Oct 28, 2020 | May 29, 2020 |
| Centos_linux | — | Upgrade freerdp-debugsourceUpgrade freerdp-debuginfoUpgrade freerdpUpgrade freerdp-develUpgrade libwinpr-develUpgrade vinagreUpgrade vinagre-debugsourceUpgrade freerdp-libsUpgrade libwinprUpgrade vinagre-debuginfoUpgrade libwinpr-debuginfoUpgrade freerdp-libs-debuginfo | Oct 1, 2020 | May 29, 2020 |
| Debian | — | Upgrade freerdp2 | Oct 10, 2023 | May 29, 2020 |
| Freebsd | — | Upgrade freerdp | Jun 9, 2020 | May 28, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freerdpUpgrade libwinprUpgrade freerdp-libs | Apr 26, 2022 | May 29, 2020 |
| Oracle_linux | — | Upgrade libwinpr-develUpgrade freerdpUpgrade vinagreUpgrade libwinprUpgrade freerdp-libsUpgrade freerdp-devel | Oct 7, 2020 | Apr 9, 2020 |
| Redhat_linux | — | Upgrade libwinpr-develUpgrade freerdpUpgrade libwinpr-debuginfoUpgrade freerdp-debuginfoUpgrade libwinprUpgrade vinagreUpgrade vinagre-debuginfoUpgrade freerdp-libs-debuginfoUpgrade freerdp-develUpgrade vinagre-debugsourceUpgrade freerdp-debugsourceNo solution existsUpgrade freerdp-libs | Oct 1, 2020 | May 29, 2020 |
| Rocky_linux | — | Upgrade vinagreUpgrade vinagre-debugsourceUpgrade vinagre-debuginfo | Mar 12, 2024 | May 29, 2020 |
| Suse | — | Upgrade freerdp-proxyUpgrade freerdp-waylandUpgrade winpr2-develUpgrade uwac0-0-develUpgrade libwinpr2Upgrade freerdpUpgrade libfreerdp2Upgrade freerdp-develUpgrade freerdp-serverUpgrade libuwac0-0Upgrade vinagreUpgrade vinagre-lang | Jul 27, 2020 | May 29, 2020 |
| Ubuntu | — | Upgrade freerdp2 | Nov 19, 2024 | May 29, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub