USN-3845-2

See a problem?
Source
https://ubuntu.com/security/notices/USN-3845-2
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3845-2.json
JSON Data
https://api.osv.dev/v1/vulns/USN-3845-2
Related
Published
2019-05-28T15:34:12.854534Z
Modified
2019-05-28T15:34:12.854534Z
Summary
freerdp vulnerabilities
Details

USN-3845-1 fixed several vulnerabilities in FreeRDP. This update provides the corresponding update for Ubuntu 18.04 LTS and Ubuntu 18.10.

Original advisory details:

Eyal Itkin discovered FreeRDP incorrectly handled certain stream encodings. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only applies to Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-8784, CVE-2018-8785)

Eyal Itkin discovered FreeRDP incorrectly handled bitmaps. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2018-8786, CVE-2018-8787)

Eyal Itkin discovered FreeRDP incorrectly handled certain stream encodings. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only applies to Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-8788)

Eyal Itkin discovered FreeRDP incorrectly handled NTLM authentication. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only applies to Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-8789)

References

Affected packages

Ubuntu:18.04:LTS / freerdp

Package

Name
freerdp
Purl
pkg:deb/ubuntu/freerdp@1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1?arch=src?distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1

Affected versions

1.*

1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "libwinpr-credentials0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-core1.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-heap0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-timezone0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-gdi1.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-sysinfo0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-crypto0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-io0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-cache1.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-common1.1.0": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-file0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-pipe0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-heap0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-primitives1.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-rail1.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-credentials0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-io0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-dsparse0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-dev": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-rpc0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-registry0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libxfreerdp-client1.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-codec1.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-bcrypt0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-error0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-plugins-standard-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-client1.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-utils0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-locale1.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-file0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-cache1.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-dsparse0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-primitives1.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-interlocked0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-sspi0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-credui0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-plugins-standard": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-error0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-client1.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-crypto1.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-crypto1.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-winhttp0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-sysinfo0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-path0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-winsock0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-credui0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-bcrypt0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-gdi1.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-path0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-environment0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-thread0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-registry0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "freerdp-x11": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-synch0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-asn1-0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-winhttp0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-utils1.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-core1.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-pipe0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-locale1.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-interlocked0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-input0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-library0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-sspicli0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-environment0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "freerdp-x11-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-handle0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libxfreerdp-client1.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-synch0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-timezone0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-sspicli0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-dev": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-codec1.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-pool0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-library0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-asn1-0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-sspi0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-crt0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-handle0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-utils1.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-crypto0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-crt0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-rail1.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-pool0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-utils0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-thread0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-winsock0.1": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-rpc0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libfreerdp-common1.1.0-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "libwinpr-input0.1-dbgsym": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1"
        }
    ]
}