In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bound read in in update_read_bitmap_data that allows client memory to be read to an image buffer. The result displayed on screen as colour.
CVSS Details
- CVSS 3.1 Base Score: 2.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freerdp-develUpgrade vinagre | May 4, 2022 | May 7, 2020 |
| Amazon Linux Ami 2 | — | Upgrade freerdp-debuginfoUpgrade freerdp-develUpgrade libwinprUpgrade freerdpUpgrade libwinpr-develUpgrade freerdp-libs | Oct 28, 2020 | May 7, 2020 |
| Centos_linux | — | Upgrade freerdpUpgrade freerdp-debugsourceUpgrade vinagre-debuginfoUpgrade vinagreUpgrade libwinpr-debuginfoUpgrade libwinpr-develUpgrade freerdp-develUpgrade libwinprUpgrade freerdp-libsUpgrade vinagre-debugsourceUpgrade freerdp-debuginfoUpgrade freerdp-libs-debuginfo | Oct 1, 2020 | May 7, 2020 |
| Debian | — | Upgrade freerdp2 | Aug 31, 2020 | May 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freerdp-libsUpgrade freerdp-pluginsUpgrade freerdp | Feb 22, 2021 | May 7, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freerdp-libsUpgrade freerdp-pluginsUpgrade freerdp | Jan 20, 2021 | May 7, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade freerdpUpgrade freerdp-pluginsUpgrade freerdp-libs | Feb 3, 2021 | May 7, 2020 |
| Oracle_linux | — | Upgrade freerdp-develUpgrade freerdp-libsUpgrade freerdpUpgrade vinagreUpgrade libwinpr-develUpgrade libwinpr | Oct 7, 2020 | Mar 30, 2020 |
| Redhat_linux | — | Upgrade vinagreUpgrade libwinpr-develUpgrade freerdp-debugsourceUpgrade vinagre-debuginfoUpgrade vinagre-debugsourceUpgrade freerdpUpgrade freerdp-debuginfoUpgrade freerdp-develUpgrade libwinpr-debuginfoUpgrade libwinprUpgrade freerdp-libs-debuginfoUpgrade freerdp-libsNo solution exists | Oct 1, 2020 | May 7, 2020 |
| Rocky_linux | — | Upgrade vinagreUpgrade vinagre-debuginfoUpgrade vinagre-debugsource | Mar 12, 2024 | May 7, 2020 |
| Ubuntu | — | Upgrade libfreerdp-core1.1Upgrade libfreerdp2-2Upgrade libfreerdp-client1.1Upgrade libfreerdp-common1.1.0Upgrade libfreerdp-server2-2Upgrade libfreerdp-client2-2 | Jun 2, 2020 | May 7, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub