Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 10

Количество 10

ubuntu логотип

CVE-2023-39351

около 3 лет назад

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of FreeRDP are subject to a Null Pointer Dereference leading a crash in the RemoteFX (rfx) handling. Inside the `rfx_process_message_tileset` function, the program allocates tiles using `rfx_allocate_tiles` for the number of numTiles. If the initialization process of tiles is not completed for various reasons, tiles will have a NULL pointer. Which may be accessed in further processing and would cause a program crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2023-39351

около 3 лет назад

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of FreeRDP are subject to a Null Pointer Dereference leading a crash in the RemoteFX (rfx) handling. Inside the `rfx_process_message_tileset` function, the program allocates tiles using `rfx_allocate_tiles` for the number of numTiles. If the initialization process of tiles is not completed for various reasons, tiles will have a NULL pointer. Which may be accessed in further processing and would cause a program crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2023-39351

около 3 лет назад

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of FreeRDP are subject to a Null Pointer Dereference leading a crash in the RemoteFX (rfx) handling. Inside the `rfx_process_message_tileset` function, the program allocates tiles using `rfx_allocate_tiles` for the number of numTiles. If the initialization process of tiles is not completed for various reasons, tiles will have a NULL pointer. Which may be accessed in further processing and would cause a program crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2023-39351

около 3 лет назад

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), ...

CVSS3: 7.5
EPSS: Низкий
fstec логотип

BDU:2023-05095

около 3 лет назад

Уязвимость функции rfx_process_message_tileset() RDP-клиента FreeRDP, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.3
EPSS: Низкий
oracle-oval логотип

ELSA-2024-2208

больше 2 лет назад

ELSA-2024-2208: freerdp security update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:4893-1

почти 3 года назад

Security update for freerdp

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:4611-1

почти 3 года назад

Security update for freerdp

EPSS: Низкий
altlinux логотип

ALT-PU-2023-8761

около 3 лет назад

ALT-PU-2023-8761: package `freerdp` update to version 2.11.0-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2023-6067

около 3 лет назад

ALT-PU-2023-6067: package `freerdp` update to version 2.11.2-alt1

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2023-39351

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of FreeRDP are subject to a Null Pointer Dereference leading a crash in the RemoteFX (rfx) handling. Inside the `rfx_process_message_tileset` function, the program allocates tiles using `rfx_allocate_tiles` for the number of numTiles. If the initialization process of tiles is not completed for various reasons, tiles will have a NULL pointer. Which may be accessed in further processing and would cause a program crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 7.5
2%
Низкий
около 3 лет назад
redhat логотип
CVE-2023-39351

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of FreeRDP are subject to a Null Pointer Dereference leading a crash in the RemoteFX (rfx) handling. Inside the `rfx_process_message_tileset` function, the program allocates tiles using `rfx_allocate_tiles` for the number of numTiles. If the initialization process of tiles is not completed for various reasons, tiles will have a NULL pointer. Which may be accessed in further processing and would cause a program crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 7.5
2%
Низкий
около 3 лет назад
nvd логотип
CVE-2023-39351

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of FreeRDP are subject to a Null Pointer Dereference leading a crash in the RemoteFX (rfx) handling. Inside the `rfx_process_message_tileset` function, the program allocates tiles using `rfx_allocate_tiles` for the number of numTiles. If the initialization process of tiles is not completed for various reasons, tiles will have a NULL pointer. Which may be accessed in further processing and would cause a program crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 7.5
2%
Низкий
около 3 лет назад
debian логотип
CVE-2023-39351

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), ...

CVSS3: 7.5
2%
Низкий
около 3 лет назад
fstec логотип
BDU:2023-05095

Уязвимость функции rfx_process_message_tileset() RDP-клиента FreeRDP, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.3
2%
Низкий
около 3 лет назад
oracle-oval логотип
ELSA-2024-2208

ELSA-2024-2208: freerdp security update (MODERATE)

больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2023:4893-1

Security update for freerdp

почти 3 года назад
suse-cvrf логотип
SUSE-SU-2023:4611-1

Security update for freerdp

почти 3 года назад
altlinux логотип
ALT-PU-2023-8761

ALT-PU-2023-8761: package `freerdp` update to version 2.11.0-alt1

CVSS3: 9.8
около 3 лет назад
altlinux логотип
ALT-PU-2023-6067

ALT-PU-2023-6067: package `freerdp` update to version 2.11.2-alt1

CVSS3: 9.8
около 3 лет назад

Уязвимостей на страницу