Every CVE Search/ Get API key

CVE-2014-0791

Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP...

6.8 MediumFix available

Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request packet.

Exploit likelihood

1.83%Up 0.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request packet.

Record
CVE-2014-0791
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-189
Updated
2026-11-02
CVE List No score

Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request packet.

Record
CVE-2014-0791
Updated
2026-11-02
EUVDEUVD-2014-0822 No score

Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request packet.

Record
EUVD-2014-0822
Updated
2026-11-03
GitHub AdvisoriesGHSA-96mv-2w64-8xpw No score

Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP...

Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request packet.

Record
GHSA-96mv-2w64-8xpw
Updated
2026-11-02
OSVMGASA-2014-0287 No score

Updated freerdp packages fix two vulnerabilities

Updated freerdp packages fix security vulnerabilities:

Integer overflows in memory allocations in client/X11/xf_graphics.c in FreeRDP through 1.0.2 allows remote RDP servers to have an unspecified impact through unspecified vectors (CVE-2014-0250).

Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request packet (CVE-2014-0791).

Record
MGASA-2014-0287
Updated
2026-11-02
OSVopenSUSE-SU-2024:10110-1 No score

freerdp-2.0.0~git.1463131968.4e66df7-2.5 on GA media

These are all security issues fixed in the freerdp-2.0.0~git.1463131968.4e66df7-2.5 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10110-1
Updated
2026-11-02
Show 4 moreShow less
OSVopenSUSE-SU-2024:13816-1 No score

freerdp2-devel-2.11.5-1.1 on GA media

These are all security issues fixed in the freerdp2-devel-2.11.5-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13816-1
Updated
2026-11-02
OSVSUSE-SU-2016:2506-1 No score

Security update for freerdp

This update for freerdp fixes the following issues:

  • CVE-2013-4118: Added a NULL pointer check to fix a server crash (bsc#829013).
  • CVE-2014-0791: Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP allowed remote RDP servers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request packet. (bsc#857491)
  • CVE-2014-0250: Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allowed remote attackers to have an unspecified impact via the width and height to the (1) xf_Pointer_New or (2) xf_Bitmap_Decompress function, which causes an incorrect amount of memory to be allocated. (bsc#880317)
Record
SUSE-SU-2016:2506-1
Updated
2026-11-02
OSVUBUNTU-CVE-2014-0791 No score

Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request packet.

Record
UBUNTU-CVE-2014-0791
Updated
2026-11-02
OSVUSN-3380-1 No score

freerdp vulnerabilities

It was discovered that FreeRDP incorrectly handled certain width and height values. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only applied to Ubuntu 14.04 LTS. (CVE-2014-0250)

It was discovered that FreeRDP incorrectly handled certain values in a Scope List. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2014-0791)

Tyler Bohan discovered that FreeRDP incorrectly handled certain length values. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-2834, CVE-2017-2835)

Tyler Bohan discovered that FreeRDP incorrectly handled certain packets. A malicious server could possibly use this issue to cause FreeRDP to crash, resulting in a denial of service. (CVE-2017-2836, CVE-2017-2837, CVE-2017-2838, CVE-2017-2839)

Record
USN-3380-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
freerdp
Debian:9
From an advisory covering 14 CVEs
 before 1.1.0~git20140921.1.440916e+dfsg1-13+deb9u4, plus listed versions
1.1.0~git20140921.1.440916e+dfsg1-131.1.0~git20140921.1.440916e+dfsg1-13+deb9u11.1.0~git20140921.1.440916e+dfsg1-13+deb9u21.1.0~git20140921.1.440916e+dfsg1-13+deb9u3
1.1.0~git20140921.1.440916e+dfsg1-13+deb9u4
freerdp
Mageia:3
From an advisory covering 2 CVEs
 before 1.0.1-2.1.mga3
1.0.1-2.1.mga3
freerdp
Mageia:4
From an advisory covering 2 CVEs
 before 1.0.2-2.1.mga4
1.0.2-2.1.mga4
freerdp
SUSE:Linux Enterprise Desktop 12 SP1
From an advisory covering 3 CVEs
 before 1.0.2-9.1
1.0.2-9.1
freerdp
SUSE:Linux Enterprise Software Development Kit 12 SP1
From an advisory covering 3 CVEs
 before 1.0.2-9.1
1.0.2-9.1
freerdp
SUSE:Linux Enterprise Workstation Extension 12 SP1
From an advisory covering 3 CVEs
 before 1.0.2-9.1
1.0.2-9.1
freerdp
Ubuntu:14.04:LTS
 before 1.0.2-2ubuntu1.1, plus listed versions
1.0.2-1ubuntu11.0.2-2ubuntu1
1.0.2-2ubuntu1.1
freerdp
Ubuntu:16.04:LTS
 before 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2, plus listed versions
1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1
1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2
freerdp
Ubuntu:14.04:LTS
From an advisory covering 8 CVEs
 before 1.0.2-2ubuntu1.1, plus listed versions
1.0.2-1ubuntu11.0.2-2ubuntu1
1.0.2-2ubuntu1.1
freerdp
Ubuntu:16.04:LTS
From an advisory covering 8 CVEs
 before 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2, plus listed versions
1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1
1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2
freerdp
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 2.0.0~git.1463131968.4e66df7-2.5
2.0.0~git.1463131968.4e66df7-2.5
freerdp2
openSUSE:Tumbleweed
From an advisory covering 5 CVEs
 before 2.11.5-1.1
2.11.5-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-0791 is a medium vulnerability (CVSS 6.8) in Freerdp, published January 3, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.83%, the 79th percentile. Fixed in freerdp 1.0.2-2ubuntu1.1.

References

Show 28 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open