FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send 0
width/height or out of bound rectangles to trigger out of bound writes. With 0
width or heigth the memory allocation will be 0
but the missing bounds checks allow writing to the pointer at this (not allocated) region. This issue has been patched in FreeRDP 2.4.1.
{ "binaries": [ { "binary_name": "freerdp2-dev", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "freerdp2-shadow-x11", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "freerdp2-shadow-x11-dbgsym", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "freerdp2-wayland", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "freerdp2-wayland-dbgsym", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "freerdp2-x11", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "freerdp2-x11-dbgsym", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "libfreerdp-client2-2", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "libfreerdp-client2-2-dbgsym", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "libfreerdp-server2-2", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "libfreerdp-server2-2-dbgsym", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "libfreerdp-shadow-subsystem2-2", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "libfreerdp-shadow-subsystem2-2-dbgsym", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "libfreerdp-shadow2-2", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "libfreerdp-shadow2-2-dbgsym", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "libfreerdp2-2", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "libfreerdp2-2-dbgsym", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "libuwac0-0", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "libuwac0-0-dbgsym", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "libuwac0-dev", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "libwinpr-tools2-2", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "libwinpr-tools2-2-dbgsym", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "libwinpr2-2", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "libwinpr2-2-dbgsym", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "libwinpr2-dev", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "winpr-utils", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" }, { "binary_name": "winpr-utils-dbgsym", "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.2" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_name": "freerdp2-dev", "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.2" }, { "binary_name": "freerdp2-shadow-x11", "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.2" }, { "binary_name": "freerdp2-wayland", "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.2" }, { "binary_name": "freerdp2-x11", "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.2" }, { "binary_name": "libfreerdp-client2-2", "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.2" }, { "binary_name": "libfreerdp-server2-2", "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.2" }, { "binary_name": "libfreerdp-shadow-subsystem2-2", "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.2" }, { "binary_name": "libfreerdp-shadow2-2", "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.2" }, { "binary_name": "libfreerdp2-2", "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.2" }, { "binary_name": "libuwac0-0", "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.2" }, { "binary_name": "libuwac0-dev", "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.2" }, { "binary_name": "libwinpr-tools2-2", "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.2" }, { "binary_name": "libwinpr2-2", "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.2" }, { "binary_name": "libwinpr2-dev", "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.2" }, { "binary_name": "winpr-utils", "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.2" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_name": "freerdp2-dev", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "freerdp2-shadow-x11", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "freerdp2-shadow-x11-dbgsym", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "freerdp2-wayland", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "freerdp2-wayland-dbgsym", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "freerdp2-x11", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "freerdp2-x11-dbgsym", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "libfreerdp-client2-2", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "libfreerdp-client2-2-dbgsym", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "libfreerdp-server2-2", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "libfreerdp-server2-2-dbgsym", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "libfreerdp-shadow-subsystem2-2", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "libfreerdp-shadow-subsystem2-2-dbgsym", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "libfreerdp-shadow2-2", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "libfreerdp-shadow2-2-dbgsym", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "libfreerdp2-2", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "libfreerdp2-2-dbgsym", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "libuwac0-0", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "libuwac0-0-dbgsym", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "libuwac0-dev", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "libwinpr-tools2-2", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "libwinpr-tools2-2-dbgsym", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "libwinpr2-2", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "libwinpr2-2-dbgsym", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "libwinpr2-dev", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "winpr-utils", "binary_version": "2.3.0+dfsg1-2ubuntu2" }, { "binary_name": "winpr-utils-dbgsym", "binary_version": "2.3.0+dfsg1-2ubuntu2" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }