In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bound read in in update_read_bitmap_data that allows client memory to be read to an image buffer. The result displayed on screen as colour.
CVSS Details
- CVSS 3.1 Base Score: 2.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade vinagreUpgrade freerdp-devel | May 4, 2022 | May 7, 2020 |
| Amazon Linux Ami 2 | — | Upgrade libwinpr-develUpgrade freerdp-libsUpgrade freerdp-debuginfoUpgrade freerdpUpgrade libwinprUpgrade freerdp-devel | Oct 28, 2020 | May 7, 2020 |
| Centos_linux | — | Upgrade vinagre-debugsourceUpgrade freerdp-libs-debuginfoUpgrade libwinprUpgrade freerdp-debuginfoUpgrade freerdp-develUpgrade freerdp-libsUpgrade freerdp-debugsourceUpgrade libwinpr-develUpgrade vinagre-debuginfoUpgrade vinagreUpgrade libwinpr-debuginfoUpgrade freerdp | Oct 1, 2020 | May 7, 2020 |
| Debian | — | Upgrade freerdp2 | Aug 31, 2020 | May 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freerdp-libsUpgrade freerdp-pluginsUpgrade freerdp | Feb 22, 2021 | May 7, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freerdpUpgrade freerdp-pluginsUpgrade freerdp-libs | Jan 20, 2021 | May 7, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade freerdp-libsUpgrade freerdp-pluginsUpgrade freerdp | Feb 3, 2021 | May 7, 2020 |
| Oracle_linux | — | Upgrade freerdpUpgrade vinagreUpgrade libwinpr-develUpgrade libwinprUpgrade freerdp-develUpgrade freerdp-libs | Oct 7, 2020 | Mar 30, 2020 |
| Redhat_linux | — | Upgrade vinagreUpgrade vinagre-debuginfoUpgrade freerdpUpgrade libwinpr-develUpgrade freerdp-debugsourceUpgrade vinagre-debugsourceUpgrade freerdp-libsUpgrade libwinprUpgrade freerdp-develUpgrade libwinpr-debuginfoUpgrade freerdp-debuginfoUpgrade freerdp-libs-debuginfoNo solution exists | Oct 1, 2020 | May 7, 2020 |
| Rocky_linux | — | Upgrade vinagre-debuginfoUpgrade vinagre-debugsourceUpgrade vinagre | Mar 12, 2024 | May 7, 2020 |
| Ubuntu | — | Upgrade libfreerdp-client1.1Upgrade libfreerdp-core1.1Upgrade libfreerdp2-2Upgrade libfreerdp-client2-2Upgrade libfreerdp-server2-2Upgrade libfreerdp-common1.1.0 | Jun 2, 2020 | May 7, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub