Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-39283

Опубликовано: 12 окт. 2022
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS3: 5.9

Описание

FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the /video command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations are not affected. This issue has been patched in version 2.8.1. If you cannot upgrade do not use the /video switch.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
esm-apps/bionic

needs-triage

esm-infra/focal

DNE

esm-infra/xenial

needs-triage

focal

DNE

jammy

DNE

trusty

ignored

end of standard support
upstream

needs-triage

xenial

ignored

end of standard support

Показывать по

РелизСтатусПримечание
bionic

released

2.2.0+dfsg1-0ubuntu0.18.04.4
devel

released

2.8.1+dfsg1-0ubuntu1
esm-apps/noble

released

2.8.1+dfsg1-0ubuntu1
esm-infra/bionic

not-affected

2.2.0+dfsg1-0ubuntu0.18.04.4
esm-infra/focal

not-affected

2.2.0+dfsg1-0ubuntu0.20.04.4
focal

released

2.2.0+dfsg1-0ubuntu0.20.04.4
jammy

released

2.6.1+dfsg1-3ubuntu2.3
kinetic

released

2.8.1+dfsg1-0ubuntu1
lunar

released

2.8.1+dfsg1-0ubuntu1
mantic

released

2.8.1+dfsg1-0ubuntu1

Показывать по

EPSS

Процентиль: 38%
0.00162
Низкий

5.9 Medium

CVSS3

Связанные уязвимости

CVSS3: 7.5
redhat
больше 2 лет назад

FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the `/video` command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations are not affected. This issue has been patched in version 2.8.1. If you cannot upgrade do not use the `/video` switch.

CVSS3: 5.9
nvd
больше 2 лет назад

FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the `/video` command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations are not affected. This issue has been patched in version 2.8.1. If you cannot upgrade do not use the `/video` switch.

CVSS3: 5.9
debian
больше 2 лет назад

FreeRDP is a free remote desktop protocol library and clients. All Fre ...

CVSS3: 5.9
fstec
больше 2 лет назад

Уязвимость RDP-клиента FreeRDP, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю получить доступ на чтение, изменение или удаление аудио/видео данных

suse-cvrf
больше 2 лет назад

Security update for freerdp

EPSS

Процентиль: 38%
0.00162
Низкий

5.9 Medium

CVSS3