CVE-2017-2838: Integer Overflow

Published Apr 24, 2018

Updated

An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.

Affected Software

4 affected components

debian/freerdp

FreeRDP freerdp=2.0.0-beta1

Debian Debian Linux=8.0

Debian Debian Linux=9.0

Event History

Apr 24, 2018

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2017-2838?

CVE-2017-2838 is considered a moderate severity vulnerability that can lead to a denial of service condition.

How do I fix CVE-2017-2838?

To fix CVE-2017-2838, you should upgrade to a fixed version of FreeRDP that addresses this vulnerability.

What does CVE-2017-2838 affect?

CVE-2017-2838 affects FreeRDP version 2.0.0-beta1 and can impact Debian GNU/Linux versions 8.0 and 9.0.

What causes the vulnerability in CVE-2017-2838?

CVE-2017-2838 is caused by improper handling of specially crafted challenge packets, leading to program termination.

Can CVE-2017-2838 be exploited remotely?

Yes, CVE-2017-2838 can be exploited by an attacker remotely, potentially via man-in-the-middle attacks.