High ELSA-2019-0697 3 CVEs

Important: freerdp security update (Oracle Linux 7)

Published Apr 2, 2019 · Updated Apr 2, 2019

Ecosystem: Oracle Linux

Summary

[1.0.2-15.1]
- Fix CVE-2018-8786 (#1684152)
- Fix CVE-2018-8787 (#1684156)
- Fix CVE-2018-8788 (#1684163)

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 7	freerdp	0:1.0.2-15.el7_6.1
Oracle Linux · 7	freerdp-devel	0:1.0.2-15.el7_6.1
Oracle Linux · 7	freerdp-libs	0:1.0.2-15.el7_6.1
Oracle Linux · 7	freerdp-plugins	0:1.0.2-15.el7_6.1

Vulnerabilities 3

Unscored —

CVE-2018-8786

FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in functio…

Check Point Software Technologies FreeRDP freerdp2 freerdp2 Network devices Debian Ubuntu Alpine

Nov 29, 2018
Unscored —

CVE-2018-8787

FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function …

Check Point Software Technologies FreeRDP freerdp2 freerdp2 Network devices Debian Ubuntu Alpine

Nov 29, 2018
Unscored —

CVE-2018-8788

FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nsc_rle_decode() that r…

Check Point Software Technologies FreeRDP freerdp2 freerdp2 Network devices Debian Ubuntu Alpine

Nov 29, 2018