In FreeRDP before 2.1.0, there is an out-of-bounds read in cliprdr_read_format_list. Clipboard format data read (by client or server) might read data out-of-bounds. This has been fixed in 2.1.0.
CVSS Details
- CVSS 3.1 Base Score: 2.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freerdp-develUpgrade vinagre | May 4, 2022 | May 29, 2020 |
| Amazon Linux Ami 2 | — | Upgrade freerdp-develUpgrade freerdp-libsUpgrade libwinpr-develUpgrade freerdpUpgrade freerdp-debuginfoUpgrade libwinpr | Oct 28, 2020 | May 29, 2020 |
| Centos_linux | — | Upgrade vinagreUpgrade libwinpr-develUpgrade freerdp-debuginfoUpgrade libwinpr-debuginfoUpgrade freerdpUpgrade libwinprUpgrade vinagre-debuginfoUpgrade freerdp-develUpgrade freerdp-libsUpgrade vinagre-debugsourceUpgrade freerdp-libs-debuginfoUpgrade freerdp-debugsource | Oct 1, 2020 | May 29, 2020 |
| Debian | — | Upgrade freerdp2 | Oct 10, 2023 | May 29, 2020 |
| Oracle_linux | — | Upgrade freerdpUpgrade freerdp-libsUpgrade libwinpr-develUpgrade freerdp-develUpgrade vinagreUpgrade libwinpr | Oct 7, 2020 | May 29, 2020 |
| Redhat_linux | — | Upgrade vinagreUpgrade libwinpr-develUpgrade freerdp-debugsourceUpgrade freerdpUpgrade libwinprUpgrade vinagre-debugsourceUpgrade freerdp-libsUpgrade freerdp-libs-debuginfoUpgrade vinagre-debuginfoUpgrade freerdp-debuginfoUpgrade freerdp-develUpgrade libwinpr-debuginfo | Oct 1, 2020 | May 29, 2020 |
| Rocky_linux | — | Upgrade vinagreUpgrade vinagre-debugsourceUpgrade vinagre-debuginfo | Mar 12, 2024 | May 29, 2020 |
| Suse | — | Upgrade vinagre-langUpgrade winpr2-develUpgrade freerdpUpgrade libfreerdp2Upgrade vinagreUpgrade freerdp-waylandUpgrade uwac0-0-develUpgrade libwinpr2Upgrade freerdp-develUpgrade freerdp-proxyUpgrade libuwac0-0Upgrade freerdp-server | Jul 27, 2020 | May 29, 2020 |
| Ubuntu | — | Upgrade freerdp2 | Nov 19, 2024 | May 29, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub