In FreeRDP before 2.1.0, there is an out-of-bounds read in cliprdr_read_format_list. Clipboard format data read (by client or server) might read data out-of-bounds. This has been fixed in 2.1.0.
CVSS Details
- CVSS 3.1 Base Score: 2.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freerdp-develUpgrade vinagre | May 4, 2022 | May 29, 2020 |
| Amazon Linux Ami 2 | — | Upgrade freerdp-develUpgrade freerdp-libsUpgrade freerdpUpgrade freerdp-debuginfoUpgrade libwinprUpgrade libwinpr-devel | Oct 28, 2020 | May 29, 2020 |
| Centos_linux | — | Upgrade libwinprUpgrade libwinpr-develUpgrade vinagreUpgrade libwinpr-debuginfoUpgrade freerdpUpgrade freerdp-debuginfoUpgrade vinagre-debuginfoUpgrade vinagre-debugsourceUpgrade freerdp-develUpgrade freerdp-debugsourceUpgrade freerdp-libs-debuginfoUpgrade freerdp-libs | Oct 1, 2020 | May 29, 2020 |
| Debian | — | Upgrade freerdp2 | Oct 10, 2023 | May 29, 2020 |
| Oracle_linux | — | Upgrade vinagreUpgrade freerdpUpgrade libwinpr-develUpgrade freerdp-libsUpgrade freerdp-develUpgrade libwinpr | Oct 7, 2020 | May 29, 2020 |
| Redhat_linux | — | Upgrade vinagreUpgrade freerdp-debugsourceUpgrade vinagre-debugsourceUpgrade freerdpUpgrade libwinpr-develUpgrade libwinprUpgrade freerdp-libs-debuginfoUpgrade freerdp-libsUpgrade libwinpr-debuginfoUpgrade freerdp-develUpgrade freerdp-debuginfoUpgrade vinagre-debuginfo | Oct 1, 2020 | May 29, 2020 |
| Rocky_linux | — | Upgrade vinagreUpgrade vinagre-debugsourceUpgrade vinagre-debuginfo | Mar 12, 2024 | May 29, 2020 |
| Suse | — | Upgrade vinagre-langUpgrade vinagreUpgrade freerdp-waylandUpgrade libfreerdp2Upgrade winpr2-develUpgrade uwac0-0-develUpgrade freerdpUpgrade libwinpr2Upgrade freerdp-serverUpgrade freerdp-develUpgrade freerdp-proxyUpgrade libuwac0-0 | Jul 27, 2020 | May 29, 2020 |
| Ubuntu | — | Upgrade freerdp2 | Nov 19, 2024 | May 29, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub