In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bound read in in update_read_bitmap_data that allows client memory to be read to an image buffer. The result displayed on screen as colour.
CVSS Details
- CVSS 3.1 Base Score: 2.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade vinagreUpgrade freerdp-devel | May 4, 2022 | May 7, 2020 |
| Amazon Linux Ami 2 | — | Upgrade libwinpr-develUpgrade freerdp-libsUpgrade freerdpUpgrade freerdp-develUpgrade libwinprUpgrade freerdp-debuginfo | Oct 28, 2020 | May 7, 2020 |
| Centos_linux | — | Upgrade freerdp-develUpgrade vinagre-debugsourceUpgrade freerdp-debuginfoUpgrade freerdp-libs-debuginfoUpgrade freerdp-libsUpgrade libwinprUpgrade vinagreUpgrade vinagre-debuginfoUpgrade libwinpr-develUpgrade freerdpUpgrade libwinpr-debuginfoUpgrade freerdp-debugsource | Oct 1, 2020 | May 7, 2020 |
| Debian | — | Upgrade freerdp2 | Aug 31, 2020 | May 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freerdp-libsUpgrade freerdpUpgrade freerdp-plugins | Feb 22, 2021 | May 7, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freerdp-pluginsUpgrade freerdp-libsUpgrade freerdp | Jan 20, 2021 | May 7, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade freerdp-libsUpgrade freerdp-pluginsUpgrade freerdp | Feb 3, 2021 | May 7, 2020 |
| Oracle_linux | — | Upgrade freerdp-libsUpgrade freerdp-develUpgrade libwinprUpgrade vinagreUpgrade libwinpr-develUpgrade freerdp | Oct 7, 2020 | Mar 30, 2020 |
| Redhat_linux | — | Upgrade freerdpUpgrade libwinpr-develUpgrade vinagre-debugsourceUpgrade vinagreUpgrade vinagre-debuginfoUpgrade freerdp-debugsourceUpgrade freerdp-libsUpgrade freerdp-libs-debuginfoNo solution existsUpgrade freerdp-debuginfoUpgrade libwinprUpgrade freerdp-develUpgrade libwinpr-debuginfo | Oct 1, 2020 | May 7, 2020 |
| Rocky_linux | — | Upgrade vinagreUpgrade vinagre-debuginfoUpgrade vinagre-debugsource | Mar 12, 2024 | May 7, 2020 |
| Ubuntu | — | Upgrade libfreerdp-client2-2Upgrade libfreerdp-common1.1.0Upgrade libfreerdp-server2-2Upgrade libfreerdp2-2Upgrade libfreerdp-core1.1Upgrade libfreerdp-client1.1 | Jun 2, 2020 | May 7, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub