First published: Tue Sep 01 2020(Updated: )
It was discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/libfreerdp-client2-2 | <2.2.0+dfsg1-0ubuntu0.20.04.1 | 2.2.0+dfsg1-0ubuntu0.20.04.1 |
=20.04 | ||
All of | ||
ubuntu/libfreerdp-server2-2 | <2.2.0+dfsg1-0ubuntu0.20.04.1 | 2.2.0+dfsg1-0ubuntu0.20.04.1 |
=20.04 | ||
All of | ||
ubuntu/libfreerdp2-2 | <2.2.0+dfsg1-0ubuntu0.20.04.1 | 2.2.0+dfsg1-0ubuntu0.20.04.1 |
=20.04 | ||
All of | ||
ubuntu/libfreerdp-client2-2 | <2.2.0+dfsg1-0ubuntu0.18.04.1 | 2.2.0+dfsg1-0ubuntu0.18.04.1 |
=18.04 | ||
All of | ||
ubuntu/libfreerdp-server2-2 | <2.2.0+dfsg1-0ubuntu0.18.04.1 | 2.2.0+dfsg1-0ubuntu0.18.04.1 |
=18.04 | ||
All of | ||
ubuntu/libfreerdp2-2 | <2.2.0+dfsg1-0ubuntu0.18.04.1 | 2.2.0+dfsg1-0ubuntu0.18.04.1 |
=18.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Contains the following vulnerabilities)
USN-4481-1 refers to a specific security advisory issued by Ubuntu which addresses vulnerabilities in FreeRDP.
FreeRDP is an open-source implementation of the Remote Desktop Protocol (RDP), which allows users to connect to remote Windows systems and access graphical desktops.
USN-4481-1 addresses multiple vulnerabilities in FreeRDP, including CVE-2020-11095, CVE-2020-11096, and CVE-2020-11097.
The vulnerabilities could allow a remote attacker to crash FreeRDP, resulting in a denial of service (DoS) or possibly execute arbitrary code on the affected system.
To mitigate the vulnerabilities, it is recommended to update FreeRDP to version 2.2.0+dfsg1-0ubuntu0.20.04.1 for Ubuntu 20.04 or 2.2.0+dfsg1-0ubuntu0.18.04.1 for Ubuntu 18.04, following the provided remedy instructions in the advisory.