In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled (nearly) arbitrary memory can be read and written due to integer overflows in length checks. This has been patched in 2.1.0.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freerdp-develUpgrade vinagre | May 4, 2022 | May 29, 2020 |
| Amazon Linux Ami 2 | — | Upgrade libwinpr-develUpgrade freerdp-debuginfoUpgrade freerdp-develUpgrade freerdpUpgrade freerdp-libsUpgrade libwinpr | Oct 28, 2020 | May 29, 2020 |
| Centos_linux | — | Upgrade libwinprUpgrade vinagre-debugsourceUpgrade freerdpUpgrade vinagreUpgrade freerdp-debugsourceUpgrade libwinpr-develUpgrade vinagre-debuginfoUpgrade freerdp-develUpgrade freerdp-libs-debuginfoUpgrade freerdp-libsUpgrade freerdp-debuginfoUpgrade libwinpr-debuginfo | Oct 1, 2020 | May 29, 2020 |
| Debian | — | Upgrade freerdp2 | Oct 10, 2023 | May 29, 2020 |
| Freebsd | — | Upgrade freerdp | Jun 9, 2020 | May 28, 2020 |
| Oracle_linux | — | Upgrade libwinpr-develUpgrade freerdp-libsUpgrade libwinprUpgrade freerdpUpgrade vinagreUpgrade freerdp-devel | Oct 7, 2020 | Apr 9, 2020 |
| Redhat_linux | — | No solution existsUpgrade libwinpr-develUpgrade freerdp-libs-debuginfoUpgrade freerdp-develUpgrade freerdpUpgrade freerdp-libsUpgrade vinagre-debuginfoUpgrade vinagre-debugsourceUpgrade freerdp-debuginfoUpgrade vinagreUpgrade libwinpr-debuginfoUpgrade libwinprUpgrade freerdp-debugsource | Oct 1, 2020 | May 29, 2020 |
| Rocky_linux | — | Upgrade vinagre-debugsourceUpgrade vinagre-debuginfoUpgrade vinagre | Mar 12, 2024 | May 29, 2020 |
| Suse | — | Upgrade libfreerdp2Upgrade freerdpUpgrade vinagreUpgrade freerdp-proxyUpgrade vinagre-langUpgrade libuwac0-0Upgrade freerdp-waylandUpgrade freerdp-develUpgrade winpr2-develUpgrade libwinpr2Upgrade uwac0-0-develUpgrade freerdp-server | Jul 27, 2020 | May 29, 2020 |
| Ubuntu | — | Upgrade freerdp2 | Nov 19, 2024 | May 29, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub