PT-2016-3474 · Freerdp+2 · Freerdp+2

Bernhard Miklautz · Publicado 2015-04-01 · Atualizado 2020-03-06 · CVE-2013-4118

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 1.1.0-beta1

Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via unspecified vectors.

Recommendations For versions prior to 1.1.0-beta1, update to version 1.1.0-beta1 or later to resolve the issue.

Correção

DoS

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2015-1346

CVE-2013-4118

MGASA-2016-0331

SUSE-SU-2016:2506-1

SUSE-SU-2016_2506-1

Produtos afetados

Alt Linux

Freerdp

Suse

Referências · 35

• https://github.com/FreeRDP/FreeRDP/commit/7d58aac24fe20ffaad7bd9b40c9ddf457c1b06e7 · Correção
• https://safe-surf.ru/specialists/bulletins-nkcki/650969 · Nota de Segurança
• https://lists.suse.com/pipermail/sle-security-updates/2016-October/002324.html · Nota
• https://packages.altlinux.org/ru/vuln/CVE-2013-4118 · Nota
• https://suse.com/security/cve/CVE-2013-4118 · Nota
• http://openwall.com/lists/oss-security/2013/07/12/2 · Nota
• https://suse.com/support/update/announcement/2016/suse-su-20162506-1 · Nota
• https://osv.dev/vulnerability/MGASA-2016-0331 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-0250 · Nota
• https://errata.altlinux.org/ALT-PU-2015-1346 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2016:2506-1 · Aviso do Fabricante
• http://lwn.net/Vulnerabilities/702552 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0250 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4118 · Nota de Segurança
• https://suse.com/security/cve/CVE-2013-4118.html · Nota