{"id":"CVE-2017-2838","aliases":["DLA-1095-1","DSA-3923-1","EUVD-2017-11979","GHSA-mgp7-ggv4-38hf","MGASA-2017-0243","MGASA-2017-0475","SUSE-SU-2017:2234-1","SUSE-SU-2020:2272-1","UBUNTU-CVE-2017-2838","USN-3380-1","openSUSE-SU-2024:10768-1"],"status":"published","title":"An exploitable denial of service vulnerability exists within the handling of challenge packets in...","description":"An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.01516,"percentile":0.74696,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190","CWE-20"],"published":"2017-07-27T00:00:00Z","modified":"2026-06-17T01:16:58Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"freerdp","fixed_in":["1.0.2-2ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"freerdp","fixed_in":["1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:7","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-1.1+deb7u4"}]}],"versions":["1.0.1-1.1+deb7u2","1.0.1-1.1+deb7u3"],"bundled":5},{"source":"osv","ecosystem":"Debian:8","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0~git20140921.1.440916e+dfsg1-4+deb8u1"}]}],"versions":["1.1.0~git20140921.1.440916e+dfsg1-4"],"bundled":6},{"source":"osv","ecosystem":"Debian:9","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0~git20140921.1.440916e+dfsg1-13+deb9u1"}]}],"versions":["1.1.0~git20140921.1.440916e+dfsg1-13"],"bundled":6},{"source":"osv","ecosystem":"Mageia:6","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-0.rc0.1.mga6"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:6","package":"remmina","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-0.rcgit.19.1.mga6"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:6","package":"vinagre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22.0-3.1.mga6"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:5","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-5.2.mga5"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0~git.1463131968.4e66df7-12.3.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0~git.1463131968.4e66df7-12.3.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0~git.1463131968.4e66df7-12.3.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0~git.1463131968.4e66df7-12.3.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP2","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0~git.1463131968.4e66df7-12.3.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0~git.1463131968.4e66df7-12.3.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-12.20.1"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-12.20.1"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"vinagre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.2-16.3.3"}]}],"bundled":46},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-2ubuntu1.1"}]}],"versions":["1.0.2-1ubuntu1","1.0.2-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2"}]}],"versions":["1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-2ubuntu1.1"}]}],"versions":["1.0.2-1ubuntu1","1.0.2-2ubuntu1"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2"}]}],"versions":["1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1"],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-2.1"}]}],"bundled":42}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"freerdp","product":"freerdp"}],"references":[{"url":"http://www.securityfocus.com/bid/99942","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link"]},{"url":"https://www.debian.org/security/2017/dsa-3923","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","web"]},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0340","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-2838"},{"url":"https://github.com/advisories/GHSA-mgp7-ggv4-38hf"},{"url":"https://advisories.mageia.org/MGASA-2017-0243.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21427","tags":["report"]},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0336","tags":["web"]},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0337","tags":["web"]},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0338","tags":["web"]},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0339","tags":["web"]},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0341","tags":["web"]},{"url":"http://blog.talosintelligence.com/2017/07/vulnerbility-spotlight-freerdp-multiple.html","tags":["web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/JNO6AUPEMWZQNGI7PEVPRUZD3OFNCQ4R/","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2017-0475.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21448","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172234-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1050699","tags":["report"]},{"url":"https://bugzilla.suse.com/1050704","tags":["report"]},{"url":"https://bugzilla.suse.com/1050708","tags":["report"]},{"url":"https://bugzilla.suse.com/1050711","tags":["report"]},{"url":"https://bugzilla.suse.com/1050712","tags":["report"]},{"url":"https://bugzilla.suse.com/1050714","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2837","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2838","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2839","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202272-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1004108","tags":["report"]},{"url":"https://bugzilla.suse.com/1085416","tags":["report"]},{"url":"https://bugzilla.suse.com/1087240","tags":["report"]},{"url":"https://bugzilla.suse.com/1090677","tags":["report"]},{"url":"https://bugzilla.suse.com/1103557","tags":["report"]},{"url":"https://bugzilla.suse.com/1104918","tags":["report"]},{"url":"https://bugzilla.suse.com/1112028","tags":["report"]},{"url":"https://bugzilla.suse.com/1116708","tags":["report"]},{"url":"https://bugzilla.suse.com/1117963","tags":["report"]},{"url":"https://bugzilla.suse.com/1117964","tags":["report"]},{"url":"https://bugzilla.suse.com/1117965","tags":["report"]},{"url":"https://bugzilla.suse.com/1117966","tags":["report"]},{"url":"https://bugzilla.suse.com/1117967","tags":["report"]},{"url":"https://bugzilla.suse.com/1120507","tags":["report"]},{"url":"https://bugzilla.suse.com/1129193","tags":["report"]},{"url":"https://bugzilla.suse.com/1169679","tags":["report"]},{"url":"https://bugzilla.suse.com/1169748","tags":["report"]},{"url":"https://bugzilla.suse.com/1171441","tags":["report"]},{"url":"https://bugzilla.suse.com/1171443","tags":["report"]},{"url":"https://bugzilla.suse.com/1171444","tags":["report"]},{"url":"https://bugzilla.suse.com/1171445","tags":["report"]},{"url":"https://bugzilla.suse.com/1171446","tags":["report"]},{"url":"https://bugzilla.suse.com/1171447","tags":["report"]},{"url":"https://bugzilla.suse.com/1171674","tags":["report"]},{"url":"https://bugzilla.suse.com/1173247","tags":["report"]},{"url":"https://bugzilla.suse.com/1173605","tags":["report"]},{"url":"https://bugzilla.suse.com/1174200","tags":["report"]},{"url":"https://bugzilla.suse.com/1174321","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-4030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-4031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-4032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-4033","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-2838","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3380-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-2838","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-0250","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-0791","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-2834","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-2835","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-2836","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-2837","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-2839","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17177","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-2838","description":"An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.","status":"published","published":"2018-04-24T19:00:00Z","modified":"2024-09-17T03:13:28.026Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:33:15.543086Z"}],"euvd":[{"id":"EUVD-2017-11979","description":"An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.","status":"published","published":"2018-04-24T19:00:00Z","modified":"2024-09-17T03:13:28Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T00:28:33.76418Z"}],"ghsa":[{"id":"GHSA-mgp7-ggv4-38hf","title":"An exploitable denial of service vulnerability exists within the handling of challenge packets in...","description":"An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.","status":"published","published":"2022-05-13T01:01:22Z","modified":"2023-02-01T05:02:25Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-20","CWE-190"],"updated_at":"2026-11-02T14:49:54.32219Z"}],"nvd":[{"id":"CVE-2017-2838","description":"An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.","status":"published","published":"2018-04-24T19:29:02.643Z","modified":"2026-06-17T01:16:58.047Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:04:17.638656Z"}],"osv":[{"id":"UBUNTU-CVE-2017-2838","description":"An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.","status":"published","published":"2017-07-27T00:00:00Z","modified":"2026-04-22T11:19:10.914932Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:14.977781Z"},{"id":"DLA-1095-1","title":"freerdp - security update","status":"published","published":"2017-09-11T00:00:00Z","modified":"2026-03-09T01:02:03.991374Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-3923-1","title":"freerdp - security update","status":"published","published":"2017-08-01T00:00:00Z","modified":"2026-03-09T01:19:40.116778Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0243","title":"Updated freerdp packages fix security vulnerabilities","description":"An exploitable code execution vulnerability exists in the authentication\nfunctionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server\nresponse can cause an out-of-bounds write resulting in an exploitable\ncondition. An attacker can compromise the server or use a man in the middle\nattack to trigger this vulnerability (CVE-2017-2834).\n\nAn exploitable code execution vulnerability exists in the RDP receive\nfunctionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server\nresponse can cause an out-of-bounds write resulting in an exploitable\ncondition. An attacker can compromise the server or use a man in the middle to\ntrigger this vulnerability (CVE-2017-2835).\n\nAn exploitable denial of service vulnerability exists within the reading of\nproprietary server certificates in FreeRDP 2.0.0-beta1+android11. A specially\ncrafted challenge packet can cause the program termination leading to a denial\nof service condition. An attacker can compromise the server or use man in the\nmiddle to trigger this vulnerability (CVE-2017-2836).\n\nAn exploitable denial of service vulnerability exists within the handling of\nsecurity data in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge\npacket can cause the program termination leading to a denial of service\ncondition. An attacker can compromise the server or use man in the middle to\ntrigger this vulnerability (CVE-2017-2837).\n\nAn exploitable denial of service vulnerability exists within the handling of\nchallenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted\nchallenge packet can cause the program termination leading to a denial of\nservice condition. An attacker can compromise the server or use man in the\nmiddle to trigger this vulnerability (CVE-2017-2838, CVE-2017-2839).\n","status":"published","published":"2017-08-03T19:05:47Z","modified":"2026-04-16T06:24:11.262547334Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"MGASA-2017-0475","title":"Updated freerdp packages fix security vulnerabilities","description":"An exploitable code execution vulnerability exists in the authentication\nfunctionality of FreeRDP 2.0.0-beta1+android11. A specially crafted\nserver response can cause an out-of-bounds write resulting in an\nexploitable condition. An attacker can compromise the server or use a\nman in the middle attack to trigger this vulnerability (CVE-2017-2834).\n\nAn exploitable code execution vulnerability exists in the RDP receive\nfunctionality of FreeRDP 2.0.0-beta1+android11. A specially crafted\nserver response can cause an out-of-bounds write resulting in an\nexploitable condition. An attacker can compromise the server or use a\nman in the middle to trigger this vulnerability (CVE-2017-2835).\n\nAn exploitable denial of service vulnerability exists within the reading\nof proprietary server certificates in FreeRDP 2.0.0-beta1+android11. A\nspecially crafted challenge packet can cause the program termination\nleading to a denial of service condition. An attacker can compromise the\nserver or use man in the middle to trigger this vulnerability\n(CVE-2017-2836).\n\nAn exploitable denial of service vulnerability exists within the\nhandling of security data in FreeRDP 2.0.0-beta1+android11. A specially\ncrafted challenge packet can cause the program termination leading to a\ndenial of service condition. An attacker can compromise the server or\nuse man in the middle to trigger this vulnerability (CVE-2017-2837).\n\nAn exploitable denial of service vulnerability exists within the\nhandling of challenge packets in FreeRDP 2.0.0-beta1+android11. A\nspecially crafted challenge packet can cause the program termination\nleading to a denial of service condition. An attacker can compromise the\nserver or use man in the middle to trigger this vulnerability\n(CVE-2017-2838, CVE-2017-2839).\n","status":"published","published":"2017-12-31T00:10:15Z","modified":"2026-04-16T06:24:04.767008183Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2024:10768-1","title":"freerdp-2.4.0-2.1 on GA media","description":"These are all security issues fixed in the freerdp-2.4.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:37:35.66086Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2017:2234-1","title":"Security update for freerdp","description":"This update for freerdp fixes the following issues:\n\n  - CVE-2017-2834: Out-of-bounds write in license_recv() (bsc#1050714)\n    \n  - CVE-2017-2835: Out-of-bounds write in rdp_recv_tpkt_pdu (bsc#1050712)\n  \n  - CVE-2017-2836: Rdp Client Read Server Proprietary Certificate Denial of Service (bsc#1050699)\n\n  - CVE-2017-2837: Client GCC Read Server Security Data DoS (bsc#1050704)\n\n  - CVE-2017-2838: Client License Read Product Info Denial of Service Vulnerability (bsc#1050708)\n\n  - CVE-2017-2839: Client License Read Challenge Packet Denial of Service (bsc#1050711)\n\n","status":"published","published":"2017-08-22T13:31:02Z","modified":"2026-02-04T04:31:38.116273Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2020:2272-1","title":"Security update for freerdp","description":"This update for freerdp fixes the following issues:\n\nfreerdp was updated to version 2.1.2 (bsc#1171441,bsc#1173247 and jsc#ECO-2006):\n\n- CVE-2020-11017: Fixed a double free which could have denied the server's service.\n- CVE-2020-11018: Fixed an out of bounds read which a malicious clients could have triggered.\n- CVE-2020-11019: Fixed an issue which could have led to denial of service if logger was set to 'WLOG_TRACE'.\n- CVE-2020-11038: Fixed a buffer overflow when /video redirection was used.\n- CVE-2020-11039: Fixed an issue which could have allowed arbitrary memory read and write when USB redirection was enabled.\n- CVE-2020-11040: Fixed an out of bounds data read in clear_decompress_subcode_rlex.\n- CVE-2020-11041: Fixed an issue with the configuration for sound backend which could have led to server's denial of service.\n- CVE-2020-11043: Fixed an out of bounds read in rfx_process_message_tileset.\n- CVE-2020-11085: Fixed an out of bounds read in cliprdr_read_format_list.\n- CVE-2020-11086: Fixed an out of bounds read in ntlm_read_ntlm_v2_client_challenge.\n- CVE-2020-11087: Fixed an out of bounds read in ntlm_read_AuthenticateMessage.\n- CVE-2020-11088: Fixed an out of bounds read in ntlm_read_NegotiateMessage.\n- CVE-2020-11089: Fixed an out of bounds read in irp function family.\n- CVE-2020-11095: Fixed a global out of bounds read in update_recv_primary_order.\n- CVE-2020-11096: Fixed a global out of bounds read in update_read_cache_bitmap_v3_order.\n- CVE-2020-11097: Fixed an out of bounds read in ntlm_av_pair_get.\n- CVE-2020-11098: Fixed an out of bounds read in glyph_cache_put.\n- CVE-2020-11099: Fixed an out of bounds Read in license_read_new_or_upgrade_license_packet.\n- CVE-2020-11521: Fixed an out of bounds write in planar.c (bsc#1171443).\n- CVE-2020-11522: Fixed an out of bounds read in gdi.c (bsc#1171444).\n- CVE-2020-11523: Fixed an integer overflow in region.c (bsc#1171445).\n- CVE-2020-11524: Fixed an out of bounds write in interleaved.c (bsc#1171446).\n- CVE-2020-11525: Fixed an out of bounds read in bitmap.c (bsc#1171447).\n- CVE-2020-11526: Fixed an out of bounds read in update_recv_secondary_order (bsc#1171674).\n- CVE-2020-13396: Fixed an Read in ntlm_read_ChallengeMessage.\n- CVE-2020-13397: Fixed an out of bounds read in security_fips_decrypt due to uninitialized value.\n- CVE-2020-13398: Fixed an out of bounds write in crypto_rsa_common.\n- CVE-2020-4030: Fixed an out of bounds read in `TrioParse`.\n- CVE-2020-4031: Fixed a use after free in gdi_SelectObject.\n- CVE-2020-4032: Fixed an integer casting in `update_recv_secondary_order`.\n- CVE-2020-4033: Fixed an out of bound read in RLEDECOMPRESS.\n- Fixed an issue where freerdp failed with -fno-common (bsc#1169748).\n- Fixed an issue where USB redirection with FreeRDP was not working (bsc#1169679).\n- Fixed an issue where freerdp could not start (bsc#1129193).\n- Fixed an issue where copy and paste between remote host was transforming text to chinese (bsc#1004108).\n- Added pulse support (bsc#1090677).\n\nAdditionally, the following issue was fixed:\n\n- CVE-2020-15103: Fix integer overflow due to missing input sanitation in rdpegfx channel (bsc#1174321).\n","status":"published","published":"2020-08-18T14:44:51Z","modified":"2026-02-04T02:32:54.178289Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"USN-3380-1","title":"freerdp vulnerabilities","description":"It was discovered that FreeRDP incorrectly handled certain width and height\nvalues. A malicious server could use this issue to cause FreeRDP to crash,\nresulting in a denial of service, or possibly execute arbitrary code. This\nissue only applied to Ubuntu 14.04 LTS. (CVE-2014-0250)\n\nIt was discovered that FreeRDP incorrectly handled certain values in a\nScope List. A malicious server could use this issue to cause FreeRDP to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. (CVE-2014-0791)\n\nTyler Bohan discovered that FreeRDP incorrectly handled certain length\nvalues. A malicious server could use this issue to cause FreeRDP to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. (CVE-2017-2834, CVE-2017-2835)\n\nTyler Bohan discovered that FreeRDP incorrectly handled certain packets. A\nmalicious server could possibly use this issue to cause FreeRDP to crash,\nresulting in a denial of service. (CVE-2017-2836, CVE-2017-2837,\nCVE-2017-2838, CVE-2017-2839)\n","status":"published","published":"2017-08-07T16:53:52Z","modified":"2026-04-22T09:38:35.146796Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}