SUSE-SU-2016:2506-1: freerdp&distro=SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2016:2506-1 is a vulnerability in freerdp&distro=SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 3 · Downstream 0 · Related 3Timeline
- 12-10-2016PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for freerdp This update for freerdp fixes the following issues: - CVE-2013-4118: Added a NULL pointer check to fix a server crash (bsc#829013). - CVE-2014-0791: Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP allowed remote RDP servers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request packet. (bsc#857491) - CVE-2014-0250: Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allowed remote attackers to have an unspecified impact via the width and height to the (1) xf_Pointer_New or (2) xf_Bitmap_Decompress function, which causes an incorrect amount of memory to be allocated. (bsc#880317)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse3 products
- freerdp&distro=SUSE Linux Enterprise Desktop 12 SP1< 1.0.2-9.1
- freerdp&distro=SUSE Linux Enterprise Software Development Kit 12 SP1< 1.0.2-9.1
- freerdp&distro=SUSE Linux Enterprise Workstation Extension 12 SP1< 1.0.2-9.1
1 vendor · 3 products
References
7 links- bugzilla.suse.com/829013REPORT
- bugzilla.suse.com/857491REPORT
- bugzilla.suse.com/880317REPORT