Security Fix(es) :

  - freerdp: Out-of-bounds write in planar.c     (CVE-2020-11521)

  - freerdp: Integer overflow in region.c (CVE-2020-11523)

  - freerdp: Out-of-bounds write in interleaved.c     (CVE-2020-11524)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2334 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: Out-of-bounds write in planar.c (CVE-2020-11521)

    * freerdp: Integer overflow in region.c (CVE-2020-11523)

    * freerdp: Out-of-bounds write in interleaved.c (CVE-2020-11524)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-105:02 advisory.

    * freerdp: Out-of-bounds write in planar.c (CVE-2020-11521)
      * freerdp: Integer overflow in region.c (CVE-2020-11523)
      * freerdp: Out-of-bounds write in interleaved.c (CVE-2020-11524)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4379-1 advisory.

    It was discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could use     this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly exeucte arbitrary     code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has freerdp packages installed that are affected by multiple vulnerabilities:

  - libfreerdp/codec/planar.c in FreeRDP version > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.
    (CVE-2020-11521)

  - libfreerdp/gdi/region.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Integer Overflow.
    (CVE-2020-11523)

  - libfreerdp/codec/interleaved.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.
    (CVE-2020-11524)

  - An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) write vulnerability has been     detected in crypto_rsa_common in libfreerdp/crypto/crypto.c. (CVE-2020-13398)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-2336 advisory.

    - CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837632)
    - CVE-2020-11523: Fix integer overflow in region.c (#1837633)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The FreeRDP changelog reports 14 CVEs addressed after 2.0.0-rc4

ID	Name	Product	Family	Published	Updated	Severity
137040	Scientific Linux Security Update : freerdp on SL7.x x86_64 (20200528)	Nessus	Scientific Linux Local Security Checks	6/2/2020	3/8/2024	medium
139384	RHEL 7 : freerdp (RHSA-2020:2334)	Nessus	Red Hat Local Security Checks	8/7/2020	11/7/2024	medium
294528	MiracleLinux 7 : freerdp-2.0.0-4.rc4.el7 (AXSA:2020-105:02)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	medium
137045	Ubuntu 18.04 LTS / 20.04 LTS : FreeRDP vulnerabilities (USN-4379-1)	Nessus	Ubuntu Local Security Checks	6/2/2020	8/27/2024	high
154493	NewStart CGSL CORE 5.05 / MAIN 5.05 : freerdp Multiple Vulnerabilities (NS-SA-2021-0143)	Nessus	NewStart CGSL Local Security Checks	10/27/2021	11/27/2023	high
137218	Oracle Linux 8 : freerdp (ELSA-2020-2336)	Nessus	Oracle Linux Local Security Checks	6/8/2020	10/23/2024	medium
137249	FreeBSD : FreeRDP -- multiple vulnerabilities (669f3fe8-a07a-11ea-b83e-f0def1f5c5a2)	Nessus	FreeBSD Local Security Checks	6/9/2020	3/7/2024	medium

Detections

Analytics

Plugins Search

medium

medium

medium

high

high

medium

medium