ELSA-2020-2336 — Important: freerdp security update (Oracle Linux 8)

Summary

[2:2.0.0-46.rc4.1]
- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837632)
- CVE-2020-11523: Fix integer overflow in region.c (#1837633)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837631)

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 8	freerdp	2:2.0.0-46.rc4.el8_2.1
Oracle Linux · 8	freerdp-devel	2:2.0.0-46.rc4.el8_2.1
Oracle Linux · 8	freerdp-libs	2:2.0.0-46.rc4.el8_2.1
Oracle Linux · 8	libwinpr	2:2.0.0-46.rc4.el8_2.1
Oracle Linux · 8	libwinpr-devel	2:2.0.0-46.rc4.el8_2.1

Vulnerabilities 3

Unscored —

CVE-2020-11521

libfreerdp/codec/planar.c in FreeRDP version > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.

freerdp2 freerdp2 freerdp freerdp Debian Ubuntu Alpine

May 15, 2020
Unscored —

CVE-2020-11523

libfreerdp/gdi/region.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Integer Overflow.

freerdp2 freerdp2 freerdp freerdp Debian Ubuntu Alpine

May 15, 2020
Unscored —

CVE-2020-11524

libfreerdp/codec/interleaved.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.

freerdp2 freerdp2 freerdp freerdp2 Debian Ubuntu Alpine

May 15, 2020

Important: freerdp security update (Oracle Linux 8)

Summary

Fixed packages 5

Vulnerabilities 3

libfreerdp/codec/planar.c in FreeRDP version > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.

libfreerdp/gdi/region.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Integer Overflow.

libfreerdp/codec/interleaved.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.