REDHAT-BUG-1661640: Low severity freerdp vulnerability

Published Dec 21, 2018

Updated

FreeRDP 2.0.0-rc3 contains an out of bounds read vulnerability in drdynvcprocesscapabilityrequest function in channels/drdynvc/client/drdynvcmain.c file. To exploit this RDPClient must connect to the rdp server with the echo option. This can lead to a two-byte outbound reading from the client memory.

References: https://github.com/FreeRDP/FreeRDP/issues/4866

Upstream Patch: https://github.com/FreeRDP/FreeRDP/pull/4871/commits/baee520e3dd9be6511c45a14c5f5e77784de1471

Affected Software

1 affected component

FreeRDP freerdp

Event History

Dec 21, 2018

Data Sourced

via Red Hat·08:31 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1661640?

The severity of REDHAT-BUG-1661640 is high due to the potential for exploitation through out of bounds reads.

How do I fix REDHAT-BUG-1661640?

To fix REDHAT-BUG-1661640, update FreeRDP to a version that patches this vulnerability.

What is the impact of REDHAT-BUG-1661640?

The impact of REDHAT-BUG-1661640 includes the possibility of unauthorized data reading during an RDP connection.

Which versions of FreeRDP are affected by REDHAT-BUG-1661640?

FreeRDP versions prior to the fix are affected by REDHAT-BUG-1661640, specifically version 2.0.0-rc3.

Is there a workaround for REDHAT-BUG-1661640?

A temporary workaround for REDHAT-BUG-1661640 is to disable the echo option when connecting to RDP servers.