Skip to content
OpenAdvisories
High USN-3380-1 8 CVEs

freerdp vulnerabilities

Published Aug 7, 2017 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that FreeRDP incorrectly handled certain width and height
values. A malicious server could use this issue to cause FreeRDP to crash,
resulting in a denial of service, or possibly execute arbitrary code. This
issue only applied to Ubuntu 14.04 LTS. (CVE-2014-0250)

It was discovered that FreeRDP incorrectly handled certain values in a
Scope List. A malicious server could use this issue to cause FreeRDP to
crash, resulting in a denial of service, or possibly execute arbitrary
code. (CVE-2014-0791)

Tyler Bohan discovered that FreeRDP incorrectly handled certain length
values. A malicious server could use this issue to cause FreeRDP to
crash, resulting in a denial of service, or possibly execute arbitrary
code. (CVE-2017-2834, CVE-2017-2835)

Tyler Bohan discovered that FreeRDP incorrectly handled certain packets. A
malicious server could possibly use this issue to cause FreeRDP to crash,
resulting in a denial of service. (CVE-2017-2836, CVE-2017-2837,
CVE-2017-2838, CVE-2017-2839)

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS freerdp 1.0.2-2ubuntu1.1
Ubuntu · 16.04 LTS 16.04:LTS freerdp 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2

Vulnerabilities 8

  • High 8.8
    CVE-2017-2834

    An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11…

    FreeRDP FreeRDP freerdp Ubuntu
  • High 8.8
    CVE-2017-2835

    An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A…

    FreeRDP FreeRDP freerdp Ubuntu
  • Medium 6.5
    CVE-2017-2836

    An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP …

    FreeRDP FreeRDP freerdp Ubuntu
  • Medium 6.5
    CVE-2017-2837

    An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+andro…

    FreeRDP FreeRDP freerdp Ubuntu
  • Medium 6.5
    CVE-2017-2838

    An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+a…

    FreeRDP FreeRDP freerdp Ubuntu
  • Medium 6.5
    CVE-2017-2839

    An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+a…

    FreeRDP FreeRDP freerdp Ubuntu
  • Unscored —
    CVE-2014-0250

    Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have an unspecified impact …

    freerdp Ubuntu
  • Unscored —
    CVE-2014-0791

    Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows r…

    freerdp Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2014-0250
  • report
    https://ubuntu.com/security/CVE-2014-0791
  • report
    https://ubuntu.com/security/CVE-2017-2834
  • report
    https://ubuntu.com/security/CVE-2017-2835
  • report
    https://ubuntu.com/security/CVE-2017-2836
  • report
    https://ubuntu.com/security/CVE-2017-2837
  • report
    https://ubuntu.com/security/CVE-2017-2838
  • report
    https://ubuntu.com/security/CVE-2017-2839