REDHAT-BUG-1661640
First published: Fri Dec 21 2018(Updated: )
FreeRDP 2.0.0-rc3 contains an out of bounds read vulnerability in drdynvc_process_capability_request function in channels/drdynvc/client/drdynvc_main.c file. To exploit this RDPClient must connect to the rdp server with the echo option. This can lead to a two-byte outbound reading from the client memory. References: <a href="https://github.com/FreeRDP/FreeRDP/issues/4866">https://github.com/FreeRDP/FreeRDP/issues/4866</a> Upstream Patch: <a href="https://github.com/FreeRDP/FreeRDP/pull/4871/commits/baee520e3dd9be6511c45a14c5f5e77784de1471">https://github.com/FreeRDP/FreeRDP/pull/4871/commits/baee520e3dd9be6511c45a14c5f5e77784de1471</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| FreeRDP |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/FreeRDP/FreeRDP/issues/4866
- https://github.com/FreeRDP/FreeRDP/pull/4871/commits/baee520e3dd9be6511c45a14c5f5e77784de1471
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1661641
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1661642
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1661643
- https://access.redhat.com/errata/RHSA-2019:2157
- https://access.redhat.com/security/cve/cve-2018-1000852
- https://bugzilla.redhat.com/show_bug.cgi?id=1661640
Frequently Asked Questions
What is the severity of REDHAT-BUG-1661640?
The severity of REDHAT-BUG-1661640 is high due to the potential for exploitation through out of bounds reads.
How do I fix REDHAT-BUG-1661640?
To fix REDHAT-BUG-1661640, update FreeRDP to a version that patches this vulnerability.
What is the impact of REDHAT-BUG-1661640?
The impact of REDHAT-BUG-1661640 includes the possibility of unauthorized data reading during an RDP connection.
Which versions of FreeRDP are affected by REDHAT-BUG-1661640?
FreeRDP versions prior to the fix are affected by REDHAT-BUG-1661640, specifically version 2.0.0-rc3.
Is there a workaround for REDHAT-BUG-1661640?
A temporary workaround for REDHAT-BUG-1661640 is to disable the echo option when connecting to RDP servers.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-1000852
- agent/description
- agent/event
- agent/severity
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/freerdp
- canonical/freerdp