Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 351

Export CSV
CVE-2018-8787

freerdp: Integer overflow leading to heap-based buffer overflow in gdi_Bitmap_Decompress() function

FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and results in a memory corruption and probably even a remote code execution.

CVSS 3.1 · 9.8 Critical EPSS 8.4% KEV · Not listed
Vendors
Canonical Debian Freerdp and 1 more
Products
Ubuntu Linux Debian Linux Freerdp and 7 more
CVE-2018-8786

freerdp: Integer truncation leading to heap-based buffer overflow in update_read_bitmap_update() function

FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function update_read_bitmap_update() and results in a memory corruption and probably even a remote code execution.

CVSS 3.1 · 9.8 Critical EPSS 8.2% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 8 more
CVE-2018-8785

freerdp: Heap-based buffer overflow in zgfx_decompress() function

FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress() that results in a memory corruption and probably even a remote code execution.

CVSS 3.1 · 9.8 Critical EPSS 7.3% KEV · Not listed
Vendors
Canonical Freerdp
Products
Ubuntu Linux Freerdp
CVE-2018-8784

freerdp: Heap-based buffer overflow in zgfx_decompress_segment() function

FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress_segment() that results in a memory corruption and probably even a remote code execution.

CVSS 3.1 · 9.8 Critical EPSS 7.3% KEV · Not listed
Vendors
Canonical Freerdp
Products
Ubuntu Linux Freerdp
CVE-2018-1000852

freerdp: out of bounds read in drdynvc_process_capability_request

FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvc_main.c, drdynvc_process_capability_request that can result in The RDP server can read the client's memory.. This attack appear to be exploitable via RDPClient must connect the rdp server with echo option. This vulnerability appears to have been fixed in after commit 205c612820dac644d665b5bb1cdf437dc5ca01e3.

CVSS 3.1 · 6.5 Medium EPSS 2.7% KEV · Not listed
Vendors
Canonical Fedoraproject Freerdp and 1 more
Products
Ubuntu Linux Fedora Freerdp and 1 more
CVE-2017-2839

freerdp: Rdp Client License Read Challenge Packet Denial of Service

An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.

CVSS 3.1 · 5.9 Medium EPSS 1.6% KEV · Not listed
Vendors
Debian Freerdp
Products
Debian Linux Freerdp
CVE-2017-2838

freerdp: Rdp Client License Read Product Info Denial of Service

An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.

CVSS 3.1 · 5.9 Medium EPSS 1.5% KEV · Not listed
Vendors
Debian Freerdp
Products
Debian Linux Freerdp
CVE-2017-2837

freerdp: Rdp Client GCC Read Server Security Data Denial of Service

An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.

CVSS 3.1 · 5.9 Medium EPSS 1.5% KEV · Not listed
Vendors
Debian Freerdp
Products
Debian Linux Freerdp
CVE-2017-2836

freerdp: Rdp Client Read Server Proprietary Certificate Denial of Service

An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Freerdp
Products
Debian Linux Freerdp
CVE-2017-2835

freerdp: Out-of-bounds write in rdp_recv_tpkt_pdu

An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle to trigger this vulnerability.

CVSS 3.1 · 8.1 High EPSS 1.4% KEV · Not listed
Vendors
Debian Freerdp
Products
Debian Linux Freerdp
CVE-2017-2834

freerdp: Out-of-bounds write in license_recv()

An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle attack to trigger this vulnerability.

CVSS 3.1 · 7.0 High EPSS 1.8% KEV · Not listed
Vendors
Debian Freerdp
Products
Debian Linux Freerdp