PT-2016-3475 · Freerdp+1 · Freerdp+1

Bernhard Miklautz · Published 2015-04-01 · Updated 2020-03-06 · CVE-2013-4119

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 1.1.0-beta+2013071101

Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, by disconnecting before authentication has finished.

Recommendations For versions prior to 1.1.0-beta+2013071101, update to version 1.1.0-beta+2013071101 or later to resolve the issue.

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2015-1346

CVE-2013-4119

MGASA-2016-0331

Affected Products

Alt Linux

Freerdp

References · 20

• https://github.com/FreeRDP/FreeRDP/commit/0773bb9303d24473fe1185d85a424dfe159aff53 · Patch
• https://safe-surf.ru/specialists/bulletins-nkcki/650969 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17177 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2013-4119 · Security Note
• https://osv.dev/vulnerability/MGASA-2016-0331 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2015-1346 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0791 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4119 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17178 · Security Note
• https://bdu.fstec.ru/vul/2020-02923 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0250 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4118 · Security Note
• https://advisories.mageia.org/MGASA-2016-0331.html · Security Note
• http://openwall.com/lists/oss-security/2013/07/12/2 · Note
• https://packages.altlinux.org/ru/vuln/CVE-2013-4119 · Note