Skip to content
OpenAdvisories
Low RHSA-2021:1849 8 CVEs

Red Hat Security Advisory: freerdp security, bug fix, and enhancement update

Published Sep 16, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 13

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream freerdp 2:2.2.0-1.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream freerdp-debuginfo 2:2.2.0-1.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream freerdp-debugsource 2:2.2.0-1.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream freerdp-libs 2:2.2.0-1.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream freerdp-libs-debuginfo 2:2.2.0-1.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream libwinpr 2:2.2.0-1.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream libwinpr-debuginfo 2:2.2.0-1.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream libwinpr-devel 2:2.2.0-1.el8
Red Hat · RHEL 8 enterprise_linux:8::crb freerdp-debuginfo 2:2.2.0-1.el8
Red Hat · RHEL 8 enterprise_linux:8::crb freerdp-debugsource 2:2.2.0-1.el8
Red Hat · RHEL 8 enterprise_linux:8::crb freerdp-devel 2:2.2.0-1.el8
Red Hat · RHEL 8 enterprise_linux:8::crb freerdp-libs-debuginfo 2:2.2.0-1.el8
Red Hat · RHEL 8 enterprise_linux:8::crb libwinpr-debuginfo 2:2.2.0-1.el8

Vulnerabilities 8

  • Low 3.5
    CVE-2020-11095

    Global OOB read in update_recv_primary_order in FreeRDP

    In FreeRDP before version 2.1.2, an out of bound reads occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2.

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Low 3.5
    CVE-2020-11096

    Global OOB read in update_read_cache_bitmap_v3_order in FreeRDP

    In FreeRDP before version 2.1.2, there is a global OOB read in update_read_cache_bitmap_v3_order. As a workaround, one can disable bitmap cache with -bitmap-cache (default). This is fixed in version 2.1.2.

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Low 3.5
    CVE-2020-11097 Public exploit

    OOB read in ntlm_av_pair_get in FreeRDP

    In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2.

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Low 3.5
    CVE-2020-11098

    Out-of-bound read in glyph_cache_put in FreeRDP

    In FreeRDP before version 2.1.2, there is an out-of-bound read in glyph_cache_put. This affects all FreeRDP clients with `+glyph-cache` option enabled This is fixed in version 2.1.2.

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Low 3.5
    CVE-2020-11099

    OOB Read in license_read_new_or_upgrade_license_packet in FreeRDP

    In FreeRDP before version 2.1.2, there is an out of bounds read in license_read_new_or_upgrade_license_packet. A manipulated license packet can lead to out of bound reads to an internal buffer. This is fixed in version 2.1.2.

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Low 3.5
    CVE-2020-15103

    Integer Overflow in FreeRDP

    In FreeRDP less than or equal to 2.1.2, an integer overflow exists due to missing input sanitation in rdpegfx channel. All FreeRDP clients are affected. The input rectangles from the server are not checked against local surface coordinates and blindly accepte…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Low 3.5
    CVE-2020-4030

    OOB read in `TrioParse` in FreeRDP

    In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks due to an integer overflow. This is fixed in version 2.1.2.

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Low 3.1
    CVE-2020-4033

    OOB Read in RLEDECOMPRESS in FreeRDP

    In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS. All FreeRDP based clients with sessions with color depth < 32 are affected. This is fixed in version 2.1.2.

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1854843
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1854847
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1854850
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1854876
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1854895
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1854899
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1854910
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1858909
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1881971
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1849.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-4030
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-4030
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-4030
  • report
    https://access.redhat.com/security/cve/CVE-2020-4033
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-4033
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-4033
  • report
    https://access.redhat.com/security/cve/CVE-2020-11095
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-11095
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-11095
  • report
    https://access.redhat.com/security/cve/CVE-2020-11096
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-11096
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-11096
  • report
    https://access.redhat.com/security/cve/CVE-2020-11097
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-11097
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-11097
  • report
    https://access.redhat.com/security/cve/CVE-2020-11098
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-11098
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-11098
  • report
    https://access.redhat.com/security/cve/CVE-2020-11099
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-11099
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-11099
  • report
    https://access.redhat.com/security/cve/CVE-2020-15103
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-15103
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-15103
  • article
    https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4r38-6hq7-j3j9