ELSA-2020-2334 — Important: freerdp security update (Oracle Linux 7)

Summary

[2.0.0-4.rc4]
- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 7	freerdp	0:2.0.0-4.rc4.el7_8
Oracle Linux · 7	freerdp-devel	0:2.0.0-4.rc4.el7_8
Oracle Linux · 7	freerdp-libs	0:2.0.0-4.rc4.el7_8
Oracle Linux · 7	libwinpr	0:2.0.0-4.rc4.el7_8
Oracle Linux · 7	libwinpr-devel	0:2.0.0-4.rc4.el7_8

Vulnerabilities 3

Unscored —

CVE-2020-11521

libfreerdp/codec/planar.c in FreeRDP version > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.

freerdp2 freerdp2 freerdp freerdp Debian Ubuntu Alpine

May 15, 2020
Unscored —

CVE-2020-11523

libfreerdp/gdi/region.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Integer Overflow.

freerdp2 freerdp2 freerdp freerdp Debian Ubuntu Alpine

May 15, 2020
Unscored —

CVE-2020-11524

libfreerdp/codec/interleaved.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.

freerdp2 freerdp2 freerdp freerdp2 Debian Ubuntu Alpine

May 15, 2020

Important: freerdp security update (Oracle Linux 7)

Summary

Fixed packages 5

Vulnerabilities 3

libfreerdp/codec/planar.c in FreeRDP version > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.

libfreerdp/gdi/region.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Integer Overflow.

libfreerdp/codec/interleaved.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.