CVE-2019-17177: High severity FreeRDP freerdp vulnerability
Last updated 24 July 2024
Other sources
libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied realloc pointer (i.e., the first argument to realloc) is also used for a realloc return value.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/freerdp2to a version that resolves this vulnerability.Fixed in 2.3.0+dfsg1-2+deb11u1Fixed in 2.3.0+dfsg1-2+deb11u3Fixed in 2.10.0+dfsg1-1
Event History
Frequently Asked Questions
What is CVE-2019-17177?
CVE-2019-17177 is a vulnerability in FreeRDP that causes memory leaks due to a realloc pointer being used for a realloc return value.
How severe is CVE-2019-17177?
CVE-2019-17177 is a vulnerability with memory leaks in FreeRDP.
Which software versions are affected by CVE-2019-17177?
The software versions affected by CVE-2019-17177 include FreeRDP 1.1.x, 2.x up to 2.0.0-rc4, and specific versions of the freerdp2 package in Debian and Ubuntu.
How can I fix CVE-2019-17177 in FreeRDP?
To fix CVE-2019-17177 in FreeRDP, update to the recommended versions provided by the Debian or Ubuntu repositories.
Where can I find more information about CVE-2019-17177?
More information about CVE-2019-17177 can be found in the references provided.