In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_NegotiateMessage. This has been fixed in 2.1.0.
CVSS Details
- CVSS 3.1 Base Score: 3.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade vinagreUpgrade freerdp-devel | May 4, 2022 | May 29, 2020 |
| Amazon Linux Ami 2 | — | Upgrade freerdp-libsUpgrade libwinprUpgrade libwinpr-develUpgrade freerdp-develUpgrade freerdpUpgrade freerdp-debuginfo | Oct 28, 2020 | May 29, 2020 |
| Centos_linux | — | Upgrade freerdp-libs-debuginfoUpgrade vinagre-debugsourceUpgrade freerdp-debugsourceUpgrade vinagre-debuginfoUpgrade libwinpr-develUpgrade libwinpr-debuginfoUpgrade freerdpUpgrade freerdp-debuginfoUpgrade libwinprUpgrade freerdp-develUpgrade freerdp-libsUpgrade vinagre | Oct 1, 2020 | May 29, 2020 |
| Debian | — | Upgrade freerdp2 | Oct 10, 2023 | May 29, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libwinprUpgrade freerdp-libsUpgrade freerdp | Apr 26, 2022 | May 29, 2020 |
| Oracle_linux | — | Upgrade vinagreUpgrade libwinprUpgrade freerdpUpgrade freerdp-develUpgrade freerdp-libsUpgrade libwinpr-devel | Oct 7, 2020 | May 29, 2020 |
| Redhat_linux | — | Upgrade libwinpr-develUpgrade freerdp-debuginfoUpgrade freerdp-debugsourceUpgrade vinagre-debugsourceUpgrade freerdpUpgrade vinagre-debuginfoUpgrade vinagreNo solution existsUpgrade freerdp-develUpgrade libwinprUpgrade freerdp-libsUpgrade freerdp-libs-debuginfoUpgrade libwinpr-debuginfo | Oct 1, 2020 | May 29, 2020 |
| Rocky_linux | — | Upgrade vinagreUpgrade vinagre-debugsourceUpgrade vinagre-debuginfo | Mar 12, 2024 | May 29, 2020 |
| Suse | — | Upgrade freerdp-waylandUpgrade libwinpr2Upgrade uwac0-0-develUpgrade winpr2-develUpgrade freerdp-serverUpgrade freerdp-develUpgrade vinagreUpgrade freerdp-proxyUpgrade freerdpUpgrade libuwac0-0Upgrade libfreerdp2Upgrade vinagre-lang | Jul 27, 2020 | May 29, 2020 |
| Ubuntu | — | Upgrade freerdp2 | Nov 19, 2024 | May 29, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub