{"schemaVersion":3,"id":"USN-3845-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"freerdp, freerdp2 vulnerabilities\n\nEyal Itkin discovered FreeRDP incorrectly handled certain stream encodings.  A\nmalicious server could use this issue to cause FreeRDP to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. This issue only applies\nto Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-8784, CVE-2018-8785)\n\nEyal Itkin discovered FreeRDP incorrectly handled bitmaps.  A malicious server\ncould use this issue to cause FreeRDP to crash, resulting in a denial of\nservice, or possibly execute arbitrary code. (CVE-2018-8786, CVE-2018-8787)\n\nEyal Itkin discovered FreeRDP incorrectly handled certain stream encodings.  A\nmalicious server could use this issue to cause FreeRDP to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. This issue only applies\nto Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-8788)\n\nEyal Itkin discovered FreeRDP incorrectly handled NTLM authentication.  A\nmalicious server could use this issue to cause FreeRDP to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. This issue only applies\nto Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-8789)","dates":{"published":"2018-12-12T11:52:38.000Z","modified":"2026-04-22T09:52:15.317Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"freerdp","name":"freerdp","label":"freerdp","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/freerdp","purlType":"deb","versions":[{"text":"< 1.0.2-2ubuntu1.2","noFixRecorded":false,"fixedIn":null},{"text":"< 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.2-2ubuntu1.2 | < 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.3","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"freerdp2","name":"freerdp2","label":"freerdp2","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/freerdp2","purlType":"deb","versions":[{"text":"< 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-3845-1","label":"ubuntu.com/security/notices/USN-3845-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-8784","label":"ubuntu.com/security/CVE-2018-8784","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2018-8785","label":"ubuntu.com/security/CVE-2018-8785","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2018-8786","label":"ubuntu.com/security/CVE-2018-8786","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2018-8787","label":"ubuntu.com/security/CVE-2018-8787","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2018-8788","label":"ubuntu.com/security/CVE-2018-8788","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2018-8789","label":"ubuntu.com/security/CVE-2018-8789","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2018-8784","CVE-2018-8785","CVE-2018-8786","CVE-2018-8787","CVE-2018-8788","CVE-2018-8789"],"downstream":[],"duplicates":[],"related":["CVE-2018-8784","CVE-2018-8785","CVE-2018-8786","CVE-2018-8787","CVE-2018-8788","CVE-2018-8789"]},"timeline":[{"kind":"published","date":"2018-12-12T11:52:38.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-22T09:52:15.317Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T08:22:23.553Z","stale":false,"partial":false}}