In FreeRDP after 1.0 and before 2.0.0, there is a stream out-of-bounds seek in update_read_synchronize that could lead to a later out-of-bounds read.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freerdp-develUpgrade vinagre | May 4, 2022 | May 7, 2020 |
| Amazon Linux Ami 2 | — | Upgrade freerdp-libsUpgrade freerdp-debuginfoUpgrade freerdp-develUpgrade libwinprUpgrade libwinpr-develUpgrade freerdp | Oct 28, 2020 | May 7, 2020 |
| Centos_linux | — | Upgrade vinagreUpgrade libwinprUpgrade freerdp-libsUpgrade freerdp-develUpgrade freerdpUpgrade freerdp-libs-debuginfoUpgrade libwinpr-develUpgrade vinagre-debugsourceUpgrade libwinpr-debuginfoUpgrade freerdp-debugsourceUpgrade freerdp-debuginfoUpgrade vinagre-debuginfo | Oct 1, 2020 | May 7, 2020 |
| Debian | — | Upgrade freerdp2 | Aug 31, 2020 | May 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freerdp-pluginsUpgrade freerdpUpgrade freerdp-libs | Jun 17, 2020 | May 7, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freerdpUpgrade freerdp-pluginsUpgrade freerdp-libs | Sep 28, 2020 | May 7, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade freerdp-libsUpgrade freerdpUpgrade freerdp-plugins | Sep 3, 2020 | May 7, 2020 |
| Oracle_linux | — | Upgrade freerdpUpgrade freerdp-libsUpgrade vinagreUpgrade libwinpr-develUpgrade freerdp-develUpgrade libwinpr | Oct 7, 2020 | Mar 30, 2020 |
| Redhat_linux | — | Upgrade freerdp-develUpgrade vinagre-debugsourceNo solution existsUpgrade freerdp-libs-debuginfoUpgrade libwinpr-debuginfoUpgrade freerdp-libsUpgrade libwinprUpgrade vinagre-debuginfoUpgrade libwinpr-develUpgrade freerdp-debuginfoUpgrade vinagreUpgrade freerdpUpgrade freerdp-debugsource | Oct 1, 2020 | May 7, 2020 |
| Rocky_linux | — | Upgrade vinagre-debuginfoUpgrade vinagre-debugsourceUpgrade vinagre | Mar 12, 2024 | May 7, 2020 |
| Ubuntu | — | Upgrade libfreerdp-common1.1.0Upgrade libfreerdp-client1.1Upgrade libfreerdp2-2Upgrade libfreerdp-core1.1Upgrade libfreerdp-client2-2Upgrade libfreerdp-server2-2 | Jun 2, 2020 | May 7, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub