{"schemaVersion":3,"id":"MGASA-2017-0243","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated freerdp packages fix security vulnerabilities\n\nAn exploitable code execution vulnerability exists in the authentication\nfunctionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server\nresponse can cause an out-of-bounds write resulting in an exploitable\ncondition. An attacker can compromise the server or use a man in the middle\nattack to trigger this vulnerability (CVE-2017-2834).\n\nAn exploitable code execution vulnerability exists in the RDP receive\nfunctionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server\nresponse can cause an out-of-bounds write resulting in an exploitable\ncondition. An attacker can compromise the server or use a man in the middle to\ntrigger this vulnerability (CVE-2017-2835).\n\nAn exploitable denial of service vulnerability exists within the reading of\nproprietary server certificates in FreeRDP 2.0.0-beta1+android11. A specially\ncrafted challenge packet can cause the program termination leading to a denial\nof service condition. An attacker can compromise the server or use man in the\nmiddle to trigger this vulnerability (CVE-2017-2836).\n\nAn exploitable denial of service vulnerability exists within the handling of\nsecurity data in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge\npacket can cause the program termination leading to a denial of service\ncondition. An attacker can compromise the server or use man in the middle to\ntrigger this vulnerability (CVE-2017-2837).\n\nAn exploitable denial of service vulnerability exists within the handling of\nchallenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted\nchallenge packet can cause the program termination leading to a denial of\nservice condition. An attacker can compromise the server or use man in the\nmiddle to trigger this vulnerability (CVE-2017-2838, CVE-2017-2839).","dates":{"published":"2017-08-03T19:05:47.000Z","modified":"2026-04-16T06:24:11.262Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"freerdp","name":"freerdp","label":"freerdp","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/freerdp","purlType":"rpm","versions":[{"text":"< 2.0.0-0.rc0.1.mga6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.0-0.rc0.1.mga6","eol":null,"hubHref":null},{"vendor":"mageia","product":"remmina","name":"remmina","label":"remmina","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/remmina","purlType":"rpm","versions":[{"text":"< 1.2.0-0.rcgit.19.1.mga6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-0.rcgit.19.1.mga6","eol":null,"hubHref":null},{"vendor":"mageia","product":"vinagre","name":"vinagre","label":"vinagre","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/vinagre","purlType":"rpm","versions":[{"text":"< 3.22.0-3.1.mga6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.22.0-3.1.mga6","eol":null,"hubHref":null}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2017-0243.html","label":"advisories.mageia.org/MGASA-2017-0243.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21427","label":"bugs.mageia.org/show_bug.cgi?id=21427","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0336","label":"www.talosintelligence.com/vulnerability_reports/TALOS-2017-0336","hostname":"www.talosintelligence.com","tags":["WEB"]},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0337","label":"www.talosintelligence.com/vulnerability_reports/TALOS-2017-0337","hostname":"www.talosintelligence.com","tags":["WEB"]},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0338","label":"www.talosintelligence.com/vulnerability_reports/TALOS-2017-0338","hostname":"www.talosintelligence.com","tags":["WEB"]},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0339","label":"www.talosintelligence.com/vulnerability_reports/TALOS-2017-0339","hostname":"www.talosintelligence.com","tags":["WEB"]},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0340","label":"www.talosintelligence.com/vulnerability_reports/TALOS-2017-0340","hostname":"www.talosintelligence.com","tags":["WEB"]},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0341","label":"www.talosintelligence.com/vulnerability_reports/TALOS-2017-0341","hostname":"www.talosintelligence.com","tags":["WEB"]},{"url":"http://blog.talosintelligence.com/2017/07/vulnerbility-spotlight-freerdp-multiple.html","label":"blog.talosintelligence.com/2017/07/vulnerbility-spotlight-freerdp-multiple.html","hostname":"blog.talosintelligence.com","tags":["WEB"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/JNO6AUPEMWZQNGI7PEVPRUZD3OFNCQ4R/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]}],"lineage":{"upstream":["CVE-2017-2834","CVE-2017-2835","CVE-2017-2836","CVE-2017-2837","CVE-2017-2838","CVE-2017-2839"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2017-08-03T19:05:47.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-16T06:24:11.262Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T13:38:37.739Z","stale":false,"partial":false}}