https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:23:07 +0000 https://cve.radiocsirt.org/vuln/alsa-2020:4647 <p><strong>Affected:</strong> AlmaLinux:8: freerdp-devel, AlmaLinux:8: vinagre</p> <p>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.</p> <p>The vinagre packages provide the Vinagre remote desktop viewer for the GNOME desktop.</p> <p>The following packages have been upgraded to a later upstream version: freerdp (2.1.1). (BZ#1834287)</p> <p>Security Fix(es):</p> <p>* freerdp: Out of bound read in cliprdr_server_receive_capabilities (CVE-2020-11018)</p> <p>* freerdp: Out of bound read/write in usb redirection channel (CVE-2020-11039)</p> <p>* freerdp: out-of-bounds read in update_read_icon_info function (CVE-2020-11042)</p> <p>* freerdp: out-of-bounds read in autodetect_recv_bandwidth_measure_results function (CVE-2020-11047)</p> <p>* freerdp: Out-of-bounds read in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c. (CVE-2020-13396)</p> <p>* freerdp: Out-of-bounds read in security_fips_decrypt in libfreerdp/core/security.c (CVE-2020-13397)</p> <p>* freerdp: Out of bound read in update_recv could result in a crash (CVE-2020-11019)</p> <p>* freerdp: Integer overflow in VIDEO channel (CVE-2020-11038)</p> <p>* freerdp: Out of bound access in clear_decompress_subcode_rlex (CVE-2020-11040)</p> <p>* freerdp: Unchecked read of array offset in rdpsnd_recv_wave2_pdu (CVE-2020-11041)</p> <p>* freerdp: out of bound read in rfx_process_message_tileset (CVE-2020-11043)</p> <p>* freerdp: double free in update_read_cache_bitmap_v3_order function (CVE-2020-11044)</p> <p>* freerdp: out of bound…</p> <p><strong>Affected:</strong> AlmaLinux:8: freerdp-devel, AlmaLinux:8: vinagre</p> <p>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.</p> <p>The vinagre packages provide the Vinagre remote desktop viewer for the GNOME desktop.</p> <p>The following packages have been upgraded to a later upstream version: freerdp (2.1.1). (BZ#1834287)</p> <p>Security Fix(es):</p> <p>* freerdp: Out of bound read in cliprdr_server_receive_capabilities (CVE-2020-11018)</p> <p>* freerdp: Out of bound read/write in usb redirection channel (CVE-2020-11039)</p> <p>* freerdp: out-of-bounds read in update_read_icon_info function (CVE-2020-11042)</p> <p>* freerdp: out-of-bounds read in autodetect_recv_bandwidth_measure_results function (CVE-2020-11047)</p> <p>* freerdp: Out-of-bounds read in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c. (CVE-2020-13396)</p> <p>* freerdp: Out-of-bounds read in security_fips_decrypt in libfreerdp/core/security.c (CVE-2020-13397)</p> <p>* freerdp: Out of bound read in update_recv could result in a crash (CVE-2020-11019)</p> <p>* freerdp: Integer overflow in VIDEO channel (CVE-2020-11038)</p> <p>* freerdp: Out of bound access in clear_decompress_subcode_rlex (CVE-2020-11040)</p> <p>* freerdp: Unchecked read of array offset in rdpsnd_recv_wave2_pdu (CVE-2020-11041)</p> <p>* freerdp: out of bound read in rfx_process_message_tileset (CVE-2020-11043)</p> <p>* freerdp: double free in update_read_cache_bitmap_v3_order function (CVE-2020-11044)</p> <p>* freerdp: out of bound…</p> https://cve.radiocsirt.org/vuln/alsa-2020:4647 https://cve.radiocsirt.org/vuln/bdu:2020-02587 bdu:2020-02587 https://cve.radiocsirt.org/vuln/bdu:2020-02587 https://cve.radiocsirt.org/vuln/cnvd-2020-31431 cnvd-2020-31431 https://cve.radiocsirt.org/vuln/cnvd-2020-31431 https://cve.radiocsirt.org/vuln/euvd-2026-40355 EUVD-2026-40355 https://cve.radiocsirt.org/vuln/euvd-2026-40355 https://cve.radiocsirt.org/vuln/fkie_cve-2020-11038 <p>In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a manipulated server can instruct the client to allocate a buffer with a smaller size than requested due to an integer overflow in size calculation. With later messages, the server can manipulate the client to write data out of bound to the previously allocated buffer. This has been patched in 2.1.0.</p> <p>In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a manipulated server can instruct the client to allocate a buffer with a smaller size than requested due to an integer overflow in size calculation. With later messages, the server can manipulate the client to write data out of bound to the previously allocated buffer. This has been patched in 2.1.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-11038 https://cve.radiocsirt.org/vuln/gsd-2020-11038 gsd-2020-11038 https://cve.radiocsirt.org/vuln/gsd-2020-11038 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1090-1 <p>Security update for freerdp</p> <p>Security update for freerdp</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:1090-1 https://cve.radiocsirt.org/vuln/suse-su-2020:2032-1 <p>Security update for freerdp</p> <p>Security update for freerdp</p> https://cve.radiocsirt.org/vuln/suse-su-2020:2032-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-11038 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: freerdp2, Ubuntu:20.04:LTS: freerdp2</p> <p>In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a manipulated server can instruct the client to allocate a buffer with a smaller size than requested due to an integer overflow in size calculation. With later messages, the server can manipulate the client to write data out of bound to the previously allocated buffer. This has been patched in 2.1.0.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: freerdp2, Ubuntu:20.04:LTS: freerdp2</p> <p>In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a manipulated server can instruct the client to allocate a buffer with a smaller size than requested due to an integer overflow in size calculation. With later messages, the server can manipulate the client to write data out of bound to the previously allocated buffer. This has been patched in 2.1.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-11038