Search CVE reports


Toggle filters

131 – 140 of 149 results


CVE-2019-17178

Low priority
Needs evaluation

HuffmanTree_makeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in FreeRDP and other products, has a memory leak because a supplied realloc pointer (i.e., the first argument to realloc) is also...

2 affected packages

freerdp2, freerdp

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp2 Not affected Not affected Not affected Not affected
freerdp Not in release Not in release Not in release Needs evaluation
Show less packages

CVE-2019-17177

Low priority

Some fixes available 2 of 3

libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied realloc pointer (i.e., the first argument to realloc) is also used for a realloc return value.

2 affected packages

freerdp, freerdp2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not affected
freerdp2 Not affected Fixed
Show less packages

CVE-2018-1000852

Low priority

Some fixes available 1 of 2

FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvc_main.c, drdynvc_process_capability_request that can result...

2 affected packages

freerdp, freerdp2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not in release Not affected
freerdp2 Not affected Fixed
Show less packages

CVE-2018-8789

Medium priority
Fixed

FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service (segfault).

2 affected packages

freerdp, freerdp2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Fixed
freerdp2 Fixed
Show less packages

CVE-2018-8788

Medium priority
Fixed

FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nsc_rle_decode() that results in a memory corruption and possibly even a remote code execution.

2 affected packages

freerdp, freerdp2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Fixed
freerdp2 Fixed
Show less packages

CVE-2018-8787

Medium priority
Fixed

FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and results in a memory corruption and probably even a remote code execution.

2 affected packages

freerdp, freerdp2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Fixed
freerdp2 Fixed
Show less packages

CVE-2018-8786

Medium priority
Fixed

FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function update_read_bitmap_update() and results in a memory corruption and probably even a remote code execution.

2 affected packages

freerdp, freerdp2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Fixed
freerdp2 Fixed
Show less packages

CVE-2018-8785

Medium priority
Fixed

FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress() that results in a memory corruption and probably even a remote code execution.

2 affected packages

freerdp, freerdp2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not affected
freerdp2 Fixed
Show less packages

CVE-2018-8784

Medium priority
Fixed

FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress_segment() that results in a memory corruption and probably even a remote code execution.

2 affected packages

freerdp, freerdp2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp Not affected
freerdp2 Fixed
Show less packages

CVE-2017-2839

Low priority
Fixed

An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service...

1 affected package

freerdp

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
freerdp
Show less packages