Описание
In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_AuthenticateMessage. This has been fixed in 2.1.0.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | freerdp | Out of support scope | ||
| Red Hat Enterprise Linux 7 | freerdp | Fixed | RHSA-2020:4031 | 29.09.2020 |
| Red Hat Enterprise Linux 8 | freerdp | Fixed | RHSA-2020:4647 | 04.11.2020 |
| Red Hat Enterprise Linux 8 | vinagre | Fixed | RHSA-2020:4647 | 04.11.2020 |
Показывать по
10
Дополнительная информация
Статус:
Low
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=1844171freerdp: out-of-bounds read in ntlm_read_AuthenticateMessage
EPSS
Процентиль: 72%
0.01369
Низкий
5.4 Medium
CVSS3
Связанные уязвимости
CVSS3: 5.4
ubuntu
больше 6 лет назад
In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_AuthenticateMessage. This has been fixed in 2.1.0.
CVSS3: 5.4
nvd
больше 6 лет назад
In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_AuthenticateMessage. This has been fixed in 2.1.0.
CVSS3: 5.4
debian
больше 6 лет назад
In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read ...
CVSS3: 9.8
altlinux
больше 6 лет назад
ALT-PU-2020-1941: package `freerdp` update to version 2.1.0-alt1
rocky
около 6 лет назад
Moderate: freerdp and vinagre security, bug fix, and enhancement update
EPSS
Процентиль: 72%
0.01369
Низкий
5.4 Medium
CVSS3