{"id":"CVE-2018-0886","aliases":["EUVD-2018-1677","GHSA-hrh9-4g5w-7q9j","SUSE-SU-2019:0134-1","SUSE-SU-2019:0539-1","SUSE-SU-2020:2272-1","openSUSE-SU-2019:0325-1","openSUSE-SU-2024:10768-1","openSUSE-SU-2024:12385-1","openSUSE-SU-2025:15103-1"],"status":"published","title":"The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2...","description":"The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how CredSSP validates request during the authentication process, aka \"CredSSP Remote Code Execution Vulnerability\".","severity":{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.8197,"percentile":0.99655,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-287"],"published":"2018-03-14T17:00:00Z","modified":"2026-06-17T01:31:52Z","exploits":[{"source":"pocgithub","id":"preempt/credssp","title":"preempt/credssp","date":"2018-04-02","url":"https://github.com/preempt/credssp"},{"source":"exploitdb","id":"EDB-44453","title":"Microsoft Credential Security Support Provider - Remote Code Execution","type":"remote","platform":"windows","date":"2018-04-13","url":"https://www.exploit-db.com/exploits/44453"}],"fixes":[{"ecosystem":"openSUSE:Tumbleweed","package":"python-pyspnego","fixed_in":["0.5.0-1.1","0.11.2-1.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0~git.1463131968.4e66df7-12.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0~git.1463131968.4e66df7-12.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0~git.1463131968.4e66df7-12.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0~git.1463131968.4e66df7-12.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0~git.1463131968.4e66df7-12.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP4","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0~git.1463131968.4e66df7-12.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0~rc4-3.3.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-12.20.1"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-12.20.1"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"vinagre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.2-16.3.3"}]}],"bundled":46},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-2.1"}]}],"bundled":42},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-pyspnego","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-pyspnego","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.2-1.4"}]}]}],"products":[{"vendor":"microsoft","product":"windows"},{"vendor":"microsoft","product":"windows_10"},{"vendor":"microsoft","product":"windows_7"},{"vendor":"microsoft","product":"windows_8.1"},{"vendor":"microsoft","product":"windows_rt_8.1"},{"vendor":"microsoft","product":"windows_server_2008"},{"vendor":"microsoft","product":"windows_server_2012"},{"vendor":"microsoft","product":"windows_server_2016"},{"vendor":"microsoft corporation","product":"windows"}],"references":[{"url":"http://www.securitytracker.com/id/1040506","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/103265","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-198-03","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0886","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://blog.preempt.com/security-advisory-credssp","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/44453/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/preempt/credssp","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0886"},{"url":"https://github.com/advisories/GHSA-hrh9-4g5w-7q9j"},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190134-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1085416","tags":["report"]},{"url":"https://bugzilla.suse.com/1087240","tags":["report"]},{"url":"https://bugzilla.suse.com/1104918","tags":["report"]},{"url":"https://bugzilla.suse.com/1116708","tags":["report"]},{"url":"https://bugzilla.suse.com/1117963","tags":["report"]},{"url":"https://bugzilla.suse.com/1117964","tags":["report"]},{"url":"https://bugzilla.suse.com/1117965","tags":["report"]},{"url":"https://bugzilla.suse.com/1117966","tags":["report"]},{"url":"https://bugzilla.suse.com/1117967","tags":["report"]},{"url":"https://bugzilla.suse.com/1120507","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8789","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190539-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1103557","tags":["report"]},{"url":"https://bugzilla.suse.com/1112028","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202272-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1004108","tags":["report"]},{"url":"https://bugzilla.suse.com/1050699","tags":["report"]},{"url":"https://bugzilla.suse.com/1050704","tags":["report"]},{"url":"https://bugzilla.suse.com/1050708","tags":["report"]},{"url":"https://bugzilla.suse.com/1050711","tags":["report"]},{"url":"https://bugzilla.suse.com/1050712","tags":["report"]},{"url":"https://bugzilla.suse.com/1050714","tags":["report"]},{"url":"https://bugzilla.suse.com/1090677","tags":["report"]},{"url":"https://bugzilla.suse.com/1129193","tags":["report"]},{"url":"https://bugzilla.suse.com/1169679","tags":["report"]},{"url":"https://bugzilla.suse.com/1169748","tags":["report"]},{"url":"https://bugzilla.suse.com/1171441","tags":["report"]},{"url":"https://bugzilla.suse.com/1171443","tags":["report"]},{"url":"https://bugzilla.suse.com/1171444","tags":["report"]},{"url":"https://bugzilla.suse.com/1171445","tags":["report"]},{"url":"https://bugzilla.suse.com/1171446","tags":["report"]},{"url":"https://bugzilla.suse.com/1171447","tags":["report"]},{"url":"https://bugzilla.suse.com/1171674","tags":["report"]},{"url":"https://bugzilla.suse.com/1173247","tags":["report"]},{"url":"https://bugzilla.suse.com/1173605","tags":["report"]},{"url":"https://bugzilla.suse.com/1174200","tags":["report"]},{"url":"https://bugzilla.suse.com/1174321","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2837","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2838","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-4030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-4031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-4032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-4033","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MIETP2PR4Q4SATLCVO5M3PMEMOFCHU4C/#MIETP2PR4Q4SATLCVO5M3PMEMOFCHU4C","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17177","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LI5KSU5NNBBTUWPYHBYZSFVRYLQ3KDGB/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2018-0886","description":"The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how CredSSP validates request during the authentication process, aka \"CredSSP Remote Code Execution Vulnerability\".","status":"published","published":"2018-03-14T17:00:00Z","modified":"2024-09-17T01:17:03.119Z","updated_at":"2026-11-02T14:35:12.596526Z"}],"euvd":[{"id":"EUVD-2018-1677","description":"The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how CredSSP validates request during the authentication process, aka \"CredSSP Remote Code Execution Vulnerability\".","status":"published","published":"2018-03-14T17:00:00Z","modified":"2024-09-17T01:17:03Z","updated_at":"2026-11-03T00:28:50.749865Z"}],"ghsa":[{"id":"GHSA-hrh9-4g5w-7q9j","title":"The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2...","description":"The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how CredSSP validates request during the authentication process, aka \"CredSSP Remote Code Execution Vulnerability\".","status":"published","published":"2022-05-14T01:22:02Z","modified":"2023-02-02T05:03:36Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:51:40.509164Z"}],"nvd":[{"id":"CVE-2018-0886","description":"The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how CredSSP validates request during the authentication process, aka \"CredSSP Remote Code Execution Vulnerability\".","status":"published","published":"2018-03-14T17:29:01.527Z","modified":"2026-06-17T01:31:52.177Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.6,"vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:04:24.264003Z"}],"osv":[{"id":"openSUSE-SU-2019:0325-1","title":"Security update for freerdp","description":"This update for freerdp to version 2.0.0~rc4 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-0886: Fix a remote code execution vulnerability (CredSSP) (bsc#1085416, bsc#1087240, bsc#1104918)\n- CVE-2018-8789: Fix several denial of service vulnerabilities in the in the NTLM Authentication module (bsc#1117965)\n- CVE-2018-8785: Fix a potential remote code execution vulnerability in the zgfx_decompress function (bsc#1117967)\n- CVE-2018-8786: Fix a potential remote code execution vulnerability in the update_read_bitmap_update function (bsc#1117966)\n- CVE-2018-8787: Fix a potential remote code execution vulnerability in the gdi_Bitmap_Decompress function (bsc#1117964)\n- CVE-2018-8788: Fix a potential remote code execution vulnerability in the nsc_rle_decode function (bsc#1117963)\n- CVE-2018-8784: Fix a potential remote code execution vulnerability in the zgfx_decompress_segment function (bsc#1116708)\n- CVE-2018-1000852: Fixed a remote memory access in the drdynvc_process_capability_request function (bsc#1120507)\n\nOther issues:\n\n- Upgraded to version 2.0.0-rc4 (FATE#326739)\n- Security and stability improvements, including bsc#1103557 and bsc#1112028\n- gateway: multiple fixes and improvements\n- client/X11: support for rail (remote app) icons was added\n- The licensing code was re-worked: Per-device licenses are now saved on the\n  client and used on re-connect:        \n      WARNING: this is a change in FreeRDP behavior regarding licensing. If the old\n      behavior is required, or no licenses should be saved use the\n      new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)\n- Improved order handling -  only orders that were enable  during capability exchange are accepted.\n      WARNING and NOTE: some servers do improperly send orders that weren't negotiated,\n      for such cases the new command line option /relax-order-checks was added to\n      disable the strict order checking. If connecting to xrdp the options\n      /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)\n- Fixed automount issues\n- Fixed several audio and microphone related issues\n- Fixed X11 Right-Ctrl ungrab feature\n- Fixed race condition in rdpsnd channel server.\n- Disabled SSE2 for ARM and powerpc\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-03-23T11:14:11Z","modified":"2026-02-04T03:42:10.458804Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:10768-1","title":"freerdp-2.4.0-2.1 on GA media","description":"These are all security issues fixed in the freerdp-2.4.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:37:35.66086Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:12385-1","title":"python310-pyspnego-0.5.0-1.1 on GA media","description":"These are all security issues fixed in the python310-pyspnego-0.5.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:29:33.111357Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"openSUSE-SU-2025:15103-1","title":"python311-pyspnego-0.11.2-1.4 on GA media","description":"These are all security issues fixed in the python311-pyspnego-0.11.2-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-17T00:00:00Z","modified":"2026-02-04T03:47:12.441349Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-SU-2019:0134-1","title":"Security update for freerdp","description":"This update for freerdp fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-0886: Fix a remote code execution vulnerability (CredSSP) (bsc#1085416, bsc#1087240, bsc#1104918)\n- CVE-2018-8789: Fix several denial of service vulnerabilities in the in the NTLM Authentication module (bsc#1117965)\n- CVE-2018-8785: Fix a potential remote code execution vulnerability in the zgfx_decompress function (bsc#1117967)\n- CVE-2018-8786: Fix a potential remote code execution vulnerability in the update_read_bitmap_update function (bsc#1117966)\n- CVE-2018-8787: Fix a potential remote code execution vulnerability in the gdi_Bitmap_Decompress function (bsc#1117964)\n- CVE-2018-8788: Fix a potential remote code execution vulnerability in the nsc_rle_decode function (bsc#1117963)\n- CVE-2018-8784: Fix a potential remote code execution vulnerability in the zgfx_decompress_segment function (bsc#1116708)\n- CVE-2018-1000852: Fixed a remote memory access in the drdynvc_process_capability_request function (bsc#1120507)\n","status":"published","published":"2019-01-21T12:51:05Z","modified":"2026-02-04T03:08:53.306408Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0539-1","title":"Security update for freerdp","description":"This update for freerdp to version 2.0.0~rc4 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-0886: Fix a remote code execution vulnerability (CredSSP) (bsc#1085416, bsc#1087240, bsc#1104918)\n- CVE-2018-8789: Fix several denial of service vulnerabilities in the in the NTLM Authentication module (bsc#1117965)\n- CVE-2018-8785: Fix a potential remote code execution vulnerability in the zgfx_decompress function (bsc#1117967)\n- CVE-2018-8786: Fix a potential remote code execution vulnerability in the update_read_bitmap_update function (bsc#1117966)\n- CVE-2018-8787: Fix a potential remote code execution vulnerability in the gdi_Bitmap_Decompress function (bsc#1117964)\n- CVE-2018-8788: Fix a potential remote code execution vulnerability in the nsc_rle_decode function (bsc#1117963)\n- CVE-2018-8784: Fix a potential remote code execution vulnerability in the zgfx_decompress_segment function (bsc#1116708)\n- CVE-2018-1000852: Fixed a remote memory access in the drdynvc_process_capability_request function (bsc#1120507)\n\nOther issues:\n\n- Upgraded to version 2.0.0-rc4 (FATE#326739)\n- Security and stability improvements, including bsc#1103557 and bsc#1112028\n- gateway: multiple fixes and improvements\n- client/X11: support for rail (remote app) icons was added\n- The licensing code was re-worked: Per-device licenses are now saved on the\n  client and used on re-connect:        \n      WARNING: this is a change in FreeRDP behavior regarding licensing. If the old\n      behavior is required, or no licenses should be saved use the\n      new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)\n- Improved order handling -  only orders that were enable  during capability exchange are accepted.\n      WARNING and NOTE: some servers do improperly send orders that weren't negotiated,\n      for such cases the new command line option /relax-order-checks was added to\n      disable the strict order checking. If connecting to xrdp the options\n      /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)\n- Fixed automount issues\n- Fixed several audio and microphone related issues\n- Fixed X11 Right-Ctrl ungrab feature\n- Fixed race condition in rdpsnd channel server.\n- Disabled SSE2 for ARM and powerpc\n","status":"published","published":"2019-03-04T16:42:27Z","modified":"2026-02-04T02:27:52.465518Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2020:2272-1","title":"Security update for freerdp","description":"This update for freerdp fixes the following issues:\n\nfreerdp was updated to version 2.1.2 (bsc#1171441,bsc#1173247 and jsc#ECO-2006):\n\n- CVE-2020-11017: Fixed a double free which could have denied the server's service.\n- CVE-2020-11018: Fixed an out of bounds read which a malicious clients could have triggered.\n- CVE-2020-11019: Fixed an issue which could have led to denial of service if logger was set to 'WLOG_TRACE'.\n- CVE-2020-11038: Fixed a buffer overflow when /video redirection was used.\n- CVE-2020-11039: Fixed an issue which could have allowed arbitrary memory read and write when USB redirection was enabled.\n- CVE-2020-11040: Fixed an out of bounds data read in clear_decompress_subcode_rlex.\n- CVE-2020-11041: Fixed an issue with the configuration for sound backend which could have led to server's denial of service.\n- CVE-2020-11043: Fixed an out of bounds read in rfx_process_message_tileset.\n- CVE-2020-11085: Fixed an out of bounds read in cliprdr_read_format_list.\n- CVE-2020-11086: Fixed an out of bounds read in ntlm_read_ntlm_v2_client_challenge.\n- CVE-2020-11087: Fixed an out of bounds read in ntlm_read_AuthenticateMessage.\n- CVE-2020-11088: Fixed an out of bounds read in ntlm_read_NegotiateMessage.\n- CVE-2020-11089: Fixed an out of bounds read in irp function family.\n- CVE-2020-11095: Fixed a global out of bounds read in update_recv_primary_order.\n- CVE-2020-11096: Fixed a global out of bounds read in update_read_cache_bitmap_v3_order.\n- CVE-2020-11097: Fixed an out of bounds read in ntlm_av_pair_get.\n- CVE-2020-11098: Fixed an out of bounds read in glyph_cache_put.\n- CVE-2020-11099: Fixed an out of bounds Read in license_read_new_or_upgrade_license_packet.\n- CVE-2020-11521: Fixed an out of bounds write in planar.c (bsc#1171443).\n- CVE-2020-11522: Fixed an out of bounds read in gdi.c (bsc#1171444).\n- CVE-2020-11523: Fixed an integer overflow in region.c (bsc#1171445).\n- CVE-2020-11524: Fixed an out of bounds write in interleaved.c (bsc#1171446).\n- CVE-2020-11525: Fixed an out of bounds read in bitmap.c (bsc#1171447).\n- CVE-2020-11526: Fixed an out of bounds read in update_recv_secondary_order (bsc#1171674).\n- CVE-2020-13396: Fixed an Read in ntlm_read_ChallengeMessage.\n- CVE-2020-13397: Fixed an out of bounds read in security_fips_decrypt due to uninitialized value.\n- CVE-2020-13398: Fixed an out of bounds write in crypto_rsa_common.\n- CVE-2020-4030: Fixed an out of bounds read in `TrioParse`.\n- CVE-2020-4031: Fixed a use after free in gdi_SelectObject.\n- CVE-2020-4032: Fixed an integer casting in `update_recv_secondary_order`.\n- CVE-2020-4033: Fixed an out of bound read in RLEDECOMPRESS.\n- Fixed an issue where freerdp failed with -fno-common (bsc#1169748).\n- Fixed an issue where USB redirection with FreeRDP was not working (bsc#1169679).\n- Fixed an issue where freerdp could not start (bsc#1129193).\n- Fixed an issue where copy and paste between remote host was transforming text to chinese (bsc#1004108).\n- Added pulse support (bsc#1090677).\n\nAdditionally, the following issue was fixed:\n\n- CVE-2020-15103: Fix integer overflow due to missing input sanitation in rdpegfx channel (bsc#1174321).\n","status":"published","published":"2020-08-18T14:44:51Z","modified":"2026-02-04T02:32:54.178289Z","updated_at":"2026-11-02T15:53:48.11786Z"}]}}