Priority LOW 33
In FreeRDP before version 2.1.2, there is an out of bounds read in license_read_new_or_upgrade_license_packet.
RHSA-2021:1849
freerdp security, bug fix, and enhancement update
Released 2021-05-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) freerdp-devel-2:2.2.0-1.el8
- Red Hat Enterprise Linux AppStream (v. 8) freerdp-2:2.2.0-1.el8, freerdp-libs-2:2.2.0-1.el8, libwinpr-2:2.2.0-1.el8 +1
Fixes 8 records
Priority LOW 33
In FreeRDP before version 2.1.2, there is a global OOB read in update_read_cache_bitmap_v3_order.
TI-2020-08971 CVE-2020-11098
Out-of-bound read in glyph_cache_put in FreeRDP
Priority LOW 32
In FreeRDP before version 2.1.2, there is an out-of-bound read in glyph_cache_put.
TI-2020-03524 CVE-2020-4033
OOB Read in RLEDECOMPRESS in FreeRDP
Priority LOW 32
In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS.
TI-2020-03521 CVE-2020-4030
OOB read in `TrioParse` in FreeRDP
Priority LOW 32
In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse.
TI-2020-08970 CVE-2020-11097
OOB read in ntlm_av_pair_get in FreeRDP
Priority LOW 27
In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES.
Priority LOW 27
In FreeRDP before version 2.1.2, an out of bound reads occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES.
TI-2020-11878 CVE-2020-15103
Integer Overflow in FreeRDP
Priority LOW 20
In FreeRDP less than or equal to 2.1.2, an integer overflow exists due to missing input sanitation in rdpegfx channel.