In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bound read in in update_read_bitmap_data that allows client memory to be read to an image buffer. The result displayed on screen as colour.
CVSS Details
- CVSS 3.1 Base Score: 2.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade vinagreUpgrade freerdp-devel | May 4, 2022 | May 7, 2020 |
| Amazon Linux Ami 2 | — | Upgrade freerdp-libsUpgrade libwinpr-develUpgrade freerdp-debuginfoUpgrade libwinprUpgrade freerdp-develUpgrade freerdp | Oct 28, 2020 | May 7, 2020 |
| Centos_linux | — | Upgrade libwinpr-develUpgrade vinagreUpgrade freerdp-debugsourceUpgrade freerdpUpgrade vinagre-debuginfoUpgrade libwinpr-debuginfoUpgrade libwinprUpgrade freerdp-libsUpgrade freerdp-develUpgrade vinagre-debugsourceUpgrade freerdp-libs-debuginfoUpgrade freerdp-debuginfo | Oct 1, 2020 | May 7, 2020 |
| Debian | — | Upgrade freerdp2 | Aug 31, 2020 | May 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freerdp-libsUpgrade freerdp-pluginsUpgrade freerdp | Feb 22, 2021 | May 7, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freerdp-pluginsUpgrade freerdpUpgrade freerdp-libs | Jan 20, 2021 | May 7, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade freerdpUpgrade freerdp-pluginsUpgrade freerdp-libs | Feb 3, 2021 | May 7, 2020 |
| Oracle_linux | — | Upgrade freerdpUpgrade libwinprUpgrade libwinpr-develUpgrade vinagreUpgrade freerdp-libsUpgrade freerdp-devel | Oct 7, 2020 | Mar 30, 2020 |
| Redhat_linux | — | Upgrade freerdp-debuginfoNo solution existsUpgrade freerdp-libsUpgrade libwinpr-debuginfoUpgrade freerdp-develUpgrade libwinprUpgrade freerdp-libs-debuginfoUpgrade libwinpr-develUpgrade vinagre-debuginfoUpgrade freerdp-debugsourceUpgrade vinagre-debugsourceUpgrade freerdpUpgrade vinagre | Oct 1, 2020 | May 7, 2020 |
| Rocky_linux | — | Upgrade vinagre-debugsourceUpgrade vinagre-debuginfoUpgrade vinagre | Mar 12, 2024 | May 7, 2020 |
| Ubuntu | — | Upgrade libfreerdp-server2-2Upgrade libfreerdp-common1.1.0Upgrade libfreerdp-client2-2Upgrade libfreerdp-core1.1Upgrade libfreerdp-client1.1Upgrade libfreerdp2-2 | Jun 2, 2020 | May 7, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub