6.5

CVE-2018-1000852

Exploit
FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvc_main.c, drdynvc_process_capability_request that can result in The RDP server can read the client's memory.. This attack appear to be exploitable via RDPClient must connect the rdp server with echo option. This vulnerability appears to have been fixed in after commit 205c612820dac644d665b5bb1cdf437dc5ca01e3.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freerdp ≫ Freerdp Version < 2.0.0
Freerdp ≫ Freerdp Version 2.0.0 Update -
Freerdp ≫ Freerdp Version 2.0.0 Update rc0
Freerdp ≫ Freerdp Version 2.0.0 Update rc1
Freerdp ≫ Freerdp Version 2.0.0 Update rc2
Canonical ≫ Ubuntu Linux Version 18.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 19.10
Canonical ≫ Ubuntu Linux Version 20.04 SwEdition lts
Fedoraproject ≫ Fedora Version 28
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.67% 0.838
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 3.9 2.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
NIST 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:N/A:P
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YVJKO2DR5EY4C4QZOP7SNNBEW2JW6FHX/
https://access.redhat.com/errata/RHSA-2019:2157
Third Party Advisory
https://github.com/FreeRDP/FreeRDP/issues/4866
Third Party Advisory
Exploit
https://github.com/FreeRDP/FreeRDP/pull/4871
Third Party Advisory
https://github.com/FreeRDP/FreeRDP/pull/4871/commits/baee520e3dd9be6511c45a14c5f5e77784de1471
Patch
Third Party Advisory
https://usn.ubuntu.com/4379-1/
Third Party Advisory