CVE-2017-2839: Medium severity FreeRDP freerdp vulnerability
An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-2839?
CVE-2017-2839 has a high severity level due to its potential to cause denial of service.
How do I fix CVE-2017-2839?
To fix CVE-2017-2839, upgrade FreeRDP to version 2.0.0 or later.
What types of systems are affected by CVE-2017-2839?
CVE-2017-2839 affects FreeRDP 2.0.0-beta1 on Debian 8.0 and 9.0 systems.
What kind of attack does CVE-2017-2839 enable?
CVE-2017-2839 enables an attacker to perform a denial of service attack by sending crafted challenge packets.
Who is at risk from CVE-2017-2839?
Users of FreeRDP versions prior to the patched release are at risk from CVE-2017-2839.