Описание
In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_NegotiateMessage. This has been fixed in 2.1.0.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| freerdp2 | fixed | 2.1.1+dfsg1-1 | package | |
| freerdp | removed | package | ||
| freerdp | no-dsa | stretch | package |
Примечания
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xh4f-fh87-43hp
EPSS
Процентиль: 73%
0.01425
Низкий
Связанные уязвимости
CVSS3: 5.4
ubuntu
больше 6 лет назад
In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_NegotiateMessage. This has been fixed in 2.1.0.
CVSS3: 5.4
redhat
больше 6 лет назад
In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_NegotiateMessage. This has been fixed in 2.1.0.
CVSS3: 5.4
nvd
больше 6 лет назад
In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_NegotiateMessage. This has been fixed in 2.1.0.
CVSS3: 9.8
altlinux
больше 6 лет назад
ALT-PU-2020-1941: package `freerdp` update to version 2.1.0-alt1
rocky
около 6 лет назад
Moderate: freerdp and vinagre security, bug fix, and enhancement update
EPSS
Процентиль: 73%
0.01425
Низкий