Check Point Software Technologies Ltd. Freerdp vulnerabilities

6 vulnerabilities

Known vulnerabilities in Check Point Software Technologies Ltd. Freerdp, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2018-8787canonicalubuntu_linux+12
EPSS score
8.36%
FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and results in a memory corruption and probably even a remote code execution.
9.8CVE-2018-8786canonicalubuntu_linux+13
EPSS score
8.16%
FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function update_read_bitmap_update() and results in a memory corruption and probably even a remote code execution.
7.5CVE-2018-8789canonicalubuntu_linux+6
EPSS score
5.24%
FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service (segfault).
9.8CVE-2018-8784canonicalubuntu_linux+4
EPSS score
7.29%
FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress_segment() that results in a memory corruption and probably even a remote code execution.
9.8CVE-2018-8785canonicalubuntu_linux+4
EPSS score
7.29%
FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress() that results in a memory corruption and probably even a remote code execution.
9.8CVE-2018-8788canonicalubuntu_linux+6
EPSS score
7.40%
FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nsc_rle_decode() that results in a memory corruption and possibly even a remote code execution.