CVE-2017-2837: Integer Overflow
An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-2837?
CVE-2017-2837 has a severity rating that may impact users due to its potential to cause denial of service.
How do I fix CVE-2017-2837?
To fix CVE-2017-2837, users should upgrade to a version of FreeRDP that is not affected by this vulnerability.
What systems are affected by CVE-2017-2837?
CVE-2017-2837 affects FreeRDP 2.0.0-beta1 and Debian Linux versions 8.0 and 9.0.
Can CVE-2017-2837 be exploited remotely?
Yes, CVE-2017-2837 can be exploited by attackers remotely to trigger a denial of service condition.
What is the nature of the attack related to CVE-2017-2837?
The nature of the attack for CVE-2017-2837 involves sending a specially crafted challenge packet to cause program termination.