[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250039

 
 

909

 
 

195882

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS2-2019-1365 --- freerdp, libwinpr

ID: oval:org.secpod.oval:def:1700277Date: (C)2019-11-27   (M)2023-11-13
Class: PATCHFamily: unix




FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvc_main.c, drdynvc_process_capability_request that can result in The RDP server can read the client#039;s memory.. This attack appear to be exploitable via RDPClient must connect the rdp server with echo option. This vulnerability appears to have been fixed in after commit 205c612820dac644d665b5bb1cdf437dc5ca01e3

Platform:
Amazon Linux 2
Product:
freerdp
libwinpr
Reference:
ALAS2-2019-1365
CVE-2018-1000852
CVE    1
CVE-2018-1000852
CPE    3
cpe:/a:freerdp:freerdp:1.1.0:beta1
cpe:/o:amazon:linux:2
cpe:/a:freerdp:freerdp

© SecPod Technologies