Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6522-1
HistoryNov 29, 2023 - 12:00 a.m.

FreeRDP vulnerabilities

2023-11-2900:00:00
ubuntu.com
22
freerdp
vulnerabilities
ubuntu
drive redirection
surface updates
remote attack
denial of service
sensitive information
arbitrary code

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.7%

JSON

Releases

  • Ubuntu 23.10
  • Ubuntu 23.04
  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS

Packages

  • freerdp2 - RDP client for Windows Terminal Services

Details

It was discovered that FreeRDP incorrectly handled drive redirection. If a
user were tricked into connection to a malicious server, a remote attacker
could use this issue to cause FreeRDP to crash, resulting in a denial of
service, or possibly obtain sensitive information. (CVE-2022-41877)

It was discovered that FreeRDP incorrectly handled certain surface updates.
A remote attacker could use this issue to cause FreeRDP to crash, resulting
in a denial of service, or possibly execute arbitrary code.
(CVE-2023-39352, CVE-2023-39356)

OSVersionArchitecturePackageVersionFilename
Ubuntu23.10noarchlibfreerdp2-2< 2.10.0+dfsg1-1.1ubuntu1.1UNKNOWN
Ubuntu23.10noarchfreerdp2-dev< 2.10.0+dfsg1-1.1ubuntu1.1UNKNOWN
Ubuntu23.10noarchfreerdp2-shadow-x11< 2.10.0+dfsg1-1.1ubuntu1.1UNKNOWN
Ubuntu23.10noarchfreerdp2-shadow-x11-dbgsym< 2.10.0+dfsg1-1.1ubuntu1.1UNKNOWN
Ubuntu23.10noarchfreerdp2-wayland< 2.10.0+dfsg1-1.1ubuntu1.1UNKNOWN
Ubuntu23.10noarchfreerdp2-wayland-dbgsym< 2.10.0+dfsg1-1.1ubuntu1.1UNKNOWN
Ubuntu23.10noarchfreerdp2-x11< 2.10.0+dfsg1-1.1ubuntu1.1UNKNOWN
Ubuntu23.10noarchfreerdp2-x11-dbgsym< 2.10.0+dfsg1-1.1ubuntu1.1UNKNOWN
Ubuntu23.10noarchlibfreerdp-client2-2< 2.10.0+dfsg1-1.1ubuntu1.1UNKNOWN
Ubuntu23.10noarchlibfreerdp-client2-2-dbgsym< 2.10.0+dfsg1-1.1ubuntu1.1UNKNOWN
Rows per page:
1-10 of 961

Related

openvas 17
osv 10
ubuntu 1
nessus 32
cvelist 3
cve 3
nvd 3
debiancve 3
veracode 2
redhatcve 3
alpinelinux 3
prion 3
ubuntucve 3
mageia 1
oraclelinux 3
almalinux 3
redhat 3
fedora 5
gentoo 1
slackware 1
redos 1
altlinux 1
freebsd 1
amazon 2
debian 2
openvas
openvas
Ubuntu: Security Advisory (USN-6522-1)
2023-11-30 00:00:00
Ubuntu: Security Advisory (USN-6522-2)
2023-12-08 00:00:00
Mageia: Security Advisory (MGASA-2022-0474)
2022-12-19 00:00:00
osv
osv
freerdp2 vulnerabilities
2023-11-29 13:34:38
freerdp2 vulnerabilities
2023-12-07 11:00:10
CVE-2023-39352
2023-08-31 21:15:07
ubuntu
ubuntu
FreeRDP vulnerabilities
2023-12-07 00:00:00
nessus
nessus
Ubuntu 18.04 ESM : FreeRDP vulnerabilities (USN-6522-2)
2023-12-07 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : FreeRDP vulnerabilities (USN-6522-1)
2023-11-29 00:00:00
Fedora 38 : freerdp (2023-10e43bcebb)
2023-09-10 00:00:00
cvelist
cvelist
CVE-2023-39356 Missing offset validation leading to Out-of-Bounds Read in FreeRDP
2023-08-31 20:50:19
CVE-2023-39352 Invalid offset validation leading to Out Of Bound Write in FreeRDP
2023-08-31 20:46:31
CVE-2022-41877 Missing input length validation in `drive` channel in FreeRDP
2022-11-16 00:00:00
cve
cve
CVE-2023-39356
2023-08-31 21:15:08
CVE-2023-39352
2023-08-31 21:15:07
CVE-2022-41877
2022-11-16 20:15:10
nvd
nvd
CVE-2023-39356
2023-08-31 21:15:08
CVE-2023-39352
2023-08-31 21:15:07
CVE-2022-41877
2022-11-16 20:15:10
debiancve
debiancve
CVE-2023-39356
2023-08-31 21:15:08
CVE-2023-39352
2023-08-31 21:15:07
CVE-2022-41877
2022-11-16 20:15:10
veracode
veracode
Out Of Bound Reads
2022-11-23 06:51:55
Out-Of-Bounds Read
2023-09-06 02:57:04
redhatcve
redhatcve
CVE-2022-41877
2022-11-17 13:57:02
CVE-2023-39356
2024-01-31 19:39:48
CVE-2023-39352
2023-09-05 15:14:22
alpinelinux
alpinelinux
CVE-2022-41877
2022-11-16 20:15:10
CVE-2023-39352
2023-08-31 21:15:07
CVE-2023-39356
2023-08-31 21:15:08
prion
prion
Out-of-bounds
2023-08-31 21:15:00
Design/Logic Flaw
2022-11-16 20:15:00
Input validation
2023-08-31 21:15:00
ubuntucve
ubuntucve
CVE-2022-41877
2022-11-16 00:00:00
CVE-2023-39352
2023-08-31 00:00:00
CVE-2023-39356
2023-08-31 00:00:00
mageia
mageia
Updated freerdp packages fix security vulnerability
2022-12-17 21:48:08
oraclelinux
oraclelinux
freerdp security update
2024-05-02 00:00:00
freerdp security update
2023-05-15 00:00:00
freerdp security update
2023-05-24 00:00:00
almalinux
almalinux
Moderate: freerdp security update
2024-04-30 00:00:00
Moderate: freerdp security update
2023-05-09 00:00:00
Moderate: freerdp security update
2023-05-16 00:00:00
redhat
redhat
(RHSA-2024:2208) Moderate: freerdp security update
2024-04-30 06:15:03
(RHSA-2023:2326) Moderate: freerdp security update
2023-05-09 05:07:27
(RHSA-2023:2851) Moderate: freerdp security update
2023-05-16 05:56:17
fedora
fedora
[SECURITY] Fedora 37 Update: freerdp-2.11.1-1.fc37
2023-09-21 01:22:07
[SECURITY] Fedora 38 Update: freerdp-2.11.1-1.fc38
2023-09-10 01:21:16
[SECURITY] Fedora 39 Update: freerdp-2.11.1-1.fc39
2023-09-21 00:16:43
gentoo
gentoo
FreeRDP: Multiple Vulnerabilities
2024-01-12 00:00:00
slackware
slackware
[slackware-security] freerdp
2022-11-17 20:05:55
redos
redos
ROS-20221121-02
2022-11-21 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package freerdp version 2.9.0-alt1
2022-12-06 00:00:00
freebsd
freebsd
freerdp -- multiple vulnerabilities
2022-12-24 00:00:00
amazon
amazon
Important: freerdp
2023-01-31 19:55:00
Medium: freerdp
2023-09-27 22:48:00
debian
debian
[SECURITY] [DLA 3654-1] freerdp2 security update
2023-11-17 17:35:06
[SECURITY] [DLA 3606-1] freerdp2 security update
2023-10-07 18:09:17

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.7%

JSON
Related for USN-6522-1
openvas17osv10ubuntu1nessus32cvelist3cve3nvd3debiancve3veracode2redhatcve3alpinelinux3prion3ubuntucve3mageia1oraclelinux3almalinux3redhat3fedora5gentoo1slackware1redos1altlinux1freebsd1amazon2debian2