Логотип exploitDog
bind:CVE-2022-39320
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-39320

Количество 10

Количество 10

ubuntu логотип

CVE-2022-39320

около 3 лет назад

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition on too narrow types leads to allocation of a buffer too small holding the data written. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/usb` redirection switch.

CVSS3: 5.5
EPSS: Низкий
redhat логотип

CVE-2022-39320

около 3 лет назад

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition on too narrow types leads to allocation of a buffer too small holding the data written. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/usb` redirection switch.

CVSS3: 3.7
EPSS: Низкий
nvd логотип

CVE-2022-39320

около 3 лет назад

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition on too narrow types leads to allocation of a buffer too small holding the data written. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/usb` redirection switch.

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2022-39320

около 3 лет назад

FreeRDP is a free remote desktop protocol library and clients. Affecte ...

CVSS3: 5.5
EPSS: Низкий
fstec логотип

BDU:2022-06971

около 3 лет назад

Уязвимость канала перенаправления USB (urbdrc) реализации протокола удалённого рабочего стола FreeRDP, позволяющая нарушителю считать связанные данные и отправить их обратно на сервер

CVSS3: 5.5
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:0400-1

почти 3 года назад

Security update for freerdp

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:0399-1

почти 3 года назад

Security update for freerdp

EPSS: Низкий
redos логотип

ROS-20221121-02

около 3 лет назад

Множественные уязвимости FreeRDP

CVSS3: 9.1
EPSS: Низкий
oracle-oval логотип

ELSA-2023-2851

больше 2 лет назад

ELSA-2023-2851: freerdp security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2023-2326

больше 2 лет назад

ELSA-2023-2326: freerdp security update (MODERATE)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2022-39320

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition on too narrow types leads to allocation of a buffer too small holding the data written. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/usb` redirection switch.

CVSS3: 5.5
0%
Низкий
около 3 лет назад
redhat логотип
CVE-2022-39320

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition on too narrow types leads to allocation of a buffer too small holding the data written. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/usb` redirection switch.

CVSS3: 3.7
0%
Низкий
около 3 лет назад
nvd логотип
CVE-2022-39320

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition on too narrow types leads to allocation of a buffer too small holding the data written. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/usb` redirection switch.

CVSS3: 5.5
0%
Низкий
около 3 лет назад
debian логотип
CVE-2022-39320

FreeRDP is a free remote desktop protocol library and clients. Affecte ...

CVSS3: 5.5
0%
Низкий
около 3 лет назад
fstec логотип
BDU:2022-06971

Уязвимость канала перенаправления USB (urbdrc) реализации протокола удалённого рабочего стола FreeRDP, позволяющая нарушителю считать связанные данные и отправить их обратно на сервер

CVSS3: 5.5
0%
Низкий
около 3 лет назад
suse-cvrf логотип
SUSE-SU-2023:0400-1

Security update for freerdp

почти 3 года назад
suse-cvrf логотип
SUSE-SU-2023:0399-1

Security update for freerdp

почти 3 года назад
redos логотип
ROS-20221121-02

Множественные уязвимости FreeRDP

CVSS3: 9.1
около 3 лет назад
oracle-oval логотип
ELSA-2023-2851

ELSA-2023-2851: freerdp security update (MODERATE)

больше 2 лет назад
oracle-oval логотип
ELSA-2023-2326

ELSA-2023-2326: freerdp security update (MODERATE)

больше 2 лет назад

Уязвимостей на страницу