PT-2016-3474 · Freerdp+2 · Freerdp+2

Bernhard Miklautz · Published 2015-04-01 · Updated 2020-03-06 · CVE-2013-4118

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 1.1.0-beta1

Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via unspecified vectors.

Recommendations For versions prior to 1.1.0-beta1, update to version 1.1.0-beta1 or later to resolve the issue.

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2015-1346

CVE-2013-4118

MGASA-2016-0331

SUSE-SU-2016:2506-1

SUSE-SU-2016_2506-1

Affected Products

Alt Linux

Freerdp

Suse

References · 35

• https://github.com/FreeRDP/FreeRDP/commit/7d58aac24fe20ffaad7bd9b40c9ddf457c1b06e7 · Patch
• https://safe-surf.ru/specialists/bulletins-nkcki/650969 · Security Note
• https://osv.dev/vulnerability/MGASA-2016-0331 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2015-1346 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2506-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0250 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4118 · Security Note
• https://advisories.mageia.org/MGASA-2016-0331.html · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17177 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2013-4118 · Security Note
• http://lists.opensuse.org/opensuse-updates/2016-09/msg00101.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0791 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4119 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17178 · Security Note
• https://bdu.fstec.ru/vul/2020-02923 · Security Note