In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_NegotiateMessage. This has been fixed in 2.1.0.
CVSS Details
- CVSS 3.1 Base Score: 3.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade vinagreUpgrade freerdp-devel | May 4, 2022 | May 29, 2020 |
| Amazon Linux Ami 2 | — | Upgrade libwinpr-develUpgrade freerdp-debuginfoUpgrade freerdp-develUpgrade freerdpUpgrade libwinprUpgrade freerdp-libs | Oct 28, 2020 | May 29, 2020 |
| Centos_linux | — | Upgrade freerdpUpgrade freerdp-libs-debuginfoUpgrade freerdp-debugsourceUpgrade vinagre-debuginfoUpgrade libwinpr-debuginfoUpgrade vinagre-debugsourceUpgrade libwinpr-develUpgrade freerdp-libsUpgrade vinagreUpgrade libwinprUpgrade freerdp-develUpgrade freerdp-debuginfo | Oct 1, 2020 | May 29, 2020 |
| Debian | — | Upgrade freerdp2 | Oct 10, 2023 | May 29, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libwinprUpgrade freerdp-libsUpgrade freerdp | Apr 26, 2022 | May 29, 2020 |
| Oracle_linux | — | Upgrade freerdp-develUpgrade vinagreUpgrade freerdpUpgrade libwinprUpgrade libwinpr-develUpgrade freerdp-libs | Oct 7, 2020 | May 29, 2020 |
| Redhat_linux | — | Upgrade vinagre-debuginfoUpgrade freerdp-debuginfoUpgrade libwinpr-develUpgrade freerdp-debugsourceUpgrade freerdpUpgrade vinagre-debugsourceUpgrade vinagreUpgrade libwinpr-debuginfoUpgrade freerdp-libs-debuginfoUpgrade libwinprNo solution existsUpgrade freerdp-libsUpgrade freerdp-devel | Oct 1, 2020 | May 29, 2020 |
| Rocky_linux | — | Upgrade vinagreUpgrade vinagre-debuginfoUpgrade vinagre-debugsource | Mar 12, 2024 | May 29, 2020 |
| Suse | — | Upgrade freerdp-proxyUpgrade libfreerdp2Upgrade libuwac0-0Upgrade freerdpUpgrade vinagre-langUpgrade vinagreUpgrade freerdp-serverUpgrade winpr2-develUpgrade freerdp-waylandUpgrade uwac0-0-develUpgrade freerdp-develUpgrade libwinpr2 | Jul 27, 2020 | May 29, 2020 |
| Ubuntu | — | Upgrade freerdp2 | Nov 19, 2024 | May 29, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub