vulnerability

Ubuntu: USN-3380-1 (CVE-2017-2835): FreeRDP vulnerabilities

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Aug 1, 2017
Added
Aug 7, 2017
Modified
Nov 8, 2024

Description

An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle to trigger this vulnerability.

Solution(s)

ubuntu-upgrade-libfreerdp-client1-1ubuntu-upgrade-libfreerdp1
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.