In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_NegotiateMessage. This has been fixed in 2.1.0.
CVSS Details
- CVSS 3.1 Base Score: 3.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade vinagreUpgrade freerdp-devel | May 4, 2022 | May 29, 2020 |
| Amazon Linux Ami 2 | — | Upgrade freerdp-libsUpgrade libwinprUpgrade freerdp-debuginfoUpgrade freerdpUpgrade libwinpr-develUpgrade freerdp-devel | Oct 28, 2020 | May 29, 2020 |
| Centos_linux | — | Upgrade freerdp-debugsourceUpgrade freerdpUpgrade freerdp-libs-debuginfoUpgrade libwinpr-develUpgrade vinagre-debuginfoUpgrade vinagre-debugsourceUpgrade libwinpr-debuginfoUpgrade freerdp-libsUpgrade vinagreUpgrade libwinprUpgrade freerdp-develUpgrade freerdp-debuginfo | Oct 1, 2020 | May 29, 2020 |
| Debian | — | Upgrade freerdp2 | Oct 10, 2023 | May 29, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freerdpUpgrade libwinprUpgrade freerdp-libs | Apr 26, 2022 | May 29, 2020 |
| Oracle_linux | — | Upgrade freerdpUpgrade libwinprUpgrade vinagreUpgrade freerdp-develUpgrade libwinpr-develUpgrade freerdp-libs | Oct 7, 2020 | May 29, 2020 |
| Redhat_linux | — | Upgrade freerdp-develUpgrade freerdp-libs-debuginfoUpgrade libwinpr-debuginfoNo solution existsUpgrade libwinprUpgrade freerdp-libsUpgrade freerdp-debugsourceUpgrade vinagre-debuginfoUpgrade vinagre-debugsourceUpgrade freerdpUpgrade vinagreUpgrade libwinpr-develUpgrade freerdp-debuginfo | Oct 1, 2020 | May 29, 2020 |
| Rocky_linux | — | Upgrade vinagre-debuginfoUpgrade vinagre-debugsourceUpgrade vinagre | Mar 12, 2024 | May 29, 2020 |
| Suse | — | Upgrade libfreerdp2Upgrade freerdp-proxyUpgrade freerdpUpgrade vinagre-langUpgrade vinagreUpgrade libuwac0-0Upgrade freerdp-waylandUpgrade freerdp-serverUpgrade uwac0-0-develUpgrade freerdp-develUpgrade libwinpr2Upgrade winpr2-devel | Jul 27, 2020 | May 29, 2020 |
| Ubuntu | — | Upgrade freerdp2 | Nov 19, 2024 | May 29, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub