Логотип exploitDog
bind:"CVE-2023-40186"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2023-40186"

Количество 8

Количество 8

ubuntu логотип

CVE-2023-40186

почти 2 года назад

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the `gdi_CreateSurface` function. This issue affects FreeRDP based clients only. FreeRDP proxies are not affected as image decoding is not done by a proxy. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.

CVSS3: 6.5
EPSS: Низкий
redhat логотип

CVE-2023-40186

почти 2 года назад

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the `gdi_CreateSurface` function. This issue affects FreeRDP based clients only. FreeRDP proxies are not affected as image decoding is not done by a proxy. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2023-40186

почти 2 года назад

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the `gdi_CreateSurface` function. This issue affects FreeRDP based clients only. FreeRDP proxies are not affected as image decoding is not done by a proxy. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2023-40186

почти 2 года назад

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), ...

CVSS3: 6.5
EPSS: Низкий
fstec логотип

BDU:2023-05071

почти 2 года назад

Уязвимость функции gdi_CreateSurface() RDP-клиента FreeRDP, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 6.5
EPSS: Низкий
oracle-oval логотип

ELSA-2024-2208

больше 1 года назад

ELSA-2024-2208: freerdp security update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:4893-1

больше 1 года назад

Security update for freerdp

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:4611-1

больше 1 года назад

Security update for freerdp

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2023-40186

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the `gdi_CreateSurface` function. This issue affects FreeRDP based clients only. FreeRDP proxies are not affected as image decoding is not done by a proxy. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.

CVSS3: 6.5
0%
Низкий
почти 2 года назад
redhat логотип
CVE-2023-40186

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the `gdi_CreateSurface` function. This issue affects FreeRDP based clients only. FreeRDP proxies are not affected as image decoding is not done by a proxy. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.

CVSS3: 7.5
0%
Низкий
почти 2 года назад
nvd логотип
CVE-2023-40186

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the `gdi_CreateSurface` function. This issue affects FreeRDP based clients only. FreeRDP proxies are not affected as image decoding is not done by a proxy. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.

CVSS3: 6.5
0%
Низкий
почти 2 года назад
debian логотип
CVE-2023-40186

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), ...

CVSS3: 6.5
0%
Низкий
почти 2 года назад
fstec логотип
BDU:2023-05071

Уязвимость функции gdi_CreateSurface() RDP-клиента FreeRDP, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 6.5
0%
Низкий
почти 2 года назад
oracle-oval логотип
ELSA-2024-2208

ELSA-2024-2208: freerdp security update (MODERATE)

больше 1 года назад
suse-cvrf логотип
SUSE-SU-2023:4893-1

Security update for freerdp

больше 1 года назад
suse-cvrf логотип
SUSE-SU-2023:4611-1

Security update for freerdp

больше 1 года назад

Уязвимостей на страницу