Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 351

Export CSV
CVE-2020-15103

Integer Overflow in FreeRDP

In FreeRDP less than or equal to 2.1.2, an integer overflow exists due to missing input sanitation in rdpegfx channel. All FreeRDP clients are affected. The input rectangles from the server are not checked against local surface coordinates and blindly accepted. A malicious server can send data that will crash the client later on (invalid length arguments to a `memcpy`) This has been fixed in 2.2.0. As a workaround, stop using command line arguments /gfx, /gfx-h264 and /network:auto

CVSS 3.1 · 3.5 Low EPSS 1.5% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 3 more
CVE-2020-13398

freerdp: Out-of-bounds write in crypto_rsa_common in libfreerdp/crypto/crypto.c

An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) write vulnerability has been detected in crypto_rsa_common in libfreerdp/crypto/crypto.c.

CVSS 3.1 · 8.3 High EPSS 2.3% KEV · Not listed
Vendors
Canonical Debian Freerdp and 2 more
Products
Ubuntu Linux Debian Linux Freerdp and 4 more
CVE-2020-13397

freerdp: Out-of-bounds read in security_fips_decrypt in libfreerdp/core/security.c

An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in security_fips_decrypt in libfreerdp/core/security.c due to an uninitialized value.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Freerdp and 2 more
Products
Ubuntu Linux Debian Linux Freerdp and 2 more
CVE-2020-13396

freerdp: Out-of-bounds read in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c.

An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c.

CVSS 3.1 · 7.1 High EPSS 2.3% KEV · Not listed
Vendors
Canonical Debian Freerdp and 2 more
Products
Ubuntu Linux Debian Linux Freerdp and 2 more
CVE-2020-11526

freerdp: Stream pointer out of bounds in update_recv_secondary_order could lead out of bounds read later

libfreerdp/core/update.c in FreeRDP versions > 1.1 through 2.0.0-rc4 has an Out-of-bounds Read.

CVSS 3.1 · 2.2 Low EPSS 1.9% KEV · Not listed
Vendors
Canonical Debian Freerdp and 2 more
Products
Ubuntu Linux Debian Linux Freerdp and 2 more
CVE-2020-11099

OOB Read in license_read_new_or_upgrade_license_packet in FreeRDP

In FreeRDP before version 2.1.2, there is an out of bounds read in license_read_new_or_upgrade_license_packet. A manipulated license packet can lead to out of bound reads to an internal buffer. This is fixed in version 2.1.2.

CVSS 3.1 · 3.5 Low EPSS 2.2% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 3 more
CVE-2020-11098

Out-of-bound read in glyph_cache_put in FreeRDP

In FreeRDP before version 2.1.2, there is an out-of-bound read in glyph_cache_put. This affects all FreeRDP clients with `+glyph-cache` option enabled This is fixed in version 2.1.2.

CVSS 3.1 · 3.5 Low EPSS 1.7% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 3 more
CVE-2020-11097

OOB read in ntlm_av_pair_get in FreeRDP

In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2.

CVSS 3.1 · 3.5 Low EPSS 1.4% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 3 more
CVE-2020-11096

Global OOB read in update_read_cache_bitmap_v3_order in FreeRDP

In FreeRDP before version 2.1.2, there is a global OOB read in update_read_cache_bitmap_v3_order. As a workaround, one can disable bitmap cache with -bitmap-cache (default). This is fixed in version 2.1.2.

CVSS 3.1 · 3.5 Low EPSS 1.9% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 3 more
CVE-2020-11095

Global OOB read in update_recv_primary_order in FreeRDP

In FreeRDP before version 2.1.2, an out of bound reads occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2.

CVSS 3.1 · 3.5 Low EPSS 1.4% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 3 more
CVE-2020-11089

Out-of-bound read in FreeRDP

In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions (parallel_process_irp_create, serial_process_irp_create, drive_process_irp_write, printer_process_irp_write, rdpei_recv_pdu, serial_process_irp_write). This has been fixed in 2.1.0.

CVSS 3.1 · 3.7 Low EPSS 1.1% KEV · Not listed
Vendors
Debian Freerdp Opensuse and 1 more
Products
Debian Linux Freerdp Leap and 1 more
CVE-2020-11088

Out-of-bound read in FreeRDP

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_NegotiateMessage. This has been fixed in 2.1.0.

CVSS 3.1 · 3.1 Low EPSS 1.4% KEV · Not listed
Vendors
Debian Freerdp Opensuse and 1 more
Products
Debian Linux Freerdp Leap and 1 more
CVE-2020-11087

Out-of-bounds Read in FreeRDP

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_AuthenticateMessage. This has been fixed in 2.1.0.

CVSS 3.1 · 3.1 Low EPSS 1.4% KEV · Not listed
Vendors
Debian Freerdp Opensuse and 1 more
Products
Debian Linux Freerdp Leap and 1 more
CVE-2020-11086

Out-of-bounds Read in FreeRDP `ntlm_read_ntlm_v2_response`

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_ntlm_v2_client_challenge that reads up to 28 bytes out-of-bound to an internal structure. This has been fixed in 2.1.0.

CVSS 3.1 · 3.1 Low EPSS 1.4% KEV · Not listed
Vendors
Debian Freerdp Opensuse and 1 more
Products
Debian Linux Freerdp Leap and 1 more
CVE-2020-11085

Out-of-bounds Read in FreeRDP

In FreeRDP before 2.1.0, there is an out-of-bounds read in cliprdr_read_format_list. Clipboard format data read (by client or server) might read data out-of-bounds. This has been fixed in 2.1.0.

CVSS 3.1 · 2.6 Low EPSS 1.7% KEV · Not listed
Vendors
Debian Freerdp Opensuse and 1 more
Products
Debian Linux Freerdp Leap and 1 more