PT-2018-3361 · Freerdp+3 · Freerdp+3
Eyal Itkin
·
Publicado
2016-04-08
·
Atualizado
2024-06-15
·
CVE-2018-8789
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
FreeRDP versions prior to 2.0.0-rc4
Description:
The issue is related to Out-Of-Bounds Reads in the NTLM Authentication module, which can result in a Denial of Service. This is caused by a buffer overflow read in the memory. An attacker could exploit this to cause a service disruption.
Recommendations:
For versions prior to 2.0.0-rc4, update to version 2.0.0-rc4 or later to resolve the issue. As a temporary workaround, consider restricting access to the NTLM Authentication module until a patch is applied.
Exploit
Correção
DoS
Buffer Over-read
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Freerdp
Suse
Ubuntu