PT-2016-3475 · Freerdp+1 · Freerdp+1

Bernhard Miklautz · Publicado 2015-04-01 · Atualizado 2020-03-06 · CVE-2013-4119

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 1.1.0-beta+2013071101

Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, by disconnecting before authentication has finished.

Recommendations For versions prior to 1.1.0-beta+2013071101, update to version 1.1.0-beta+2013071101 or later to resolve the issue.

Correção

DoS

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2015-1346

CVE-2013-4119

MGASA-2016-0331

Produtos afetados

Alt Linux

Freerdp

Referências · 20

• https://github.com/FreeRDP/FreeRDP/commit/0773bb9303d24473fe1185d85a424dfe159aff53 · Correção
• https://safe-surf.ru/specialists/bulletins-nkcki/650969 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17177 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2013-4119 · Nota de Segurança
• http://openwall.com/lists/oss-security/2013/07/12/2 · Nota
• https://osv.dev/vulnerability/MGASA-2016-0331 · Aviso do Fabricante
• https://packages.altlinux.org/ru/vuln/CVE-2013-4119 · Nota
• https://errata.altlinux.org/ALT-PU-2015-1346 · Aviso do Fabricante
• https://lists.opensuse.org/opensuse-updates/2016-09/msg00101.html · Nota
• http://lwn.net/Vulnerabilities/702552 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0791 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4119 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17178 · Nota de Segurança
• https://bdu.fstec.ru/vul/2020-02923 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0250 · Nota de Segurança