Published: 24/04/2018 Updated: 03/06/2022

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.9 | Impact Score: 3.6 | Exploitability Score: 2.2

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.

Vulnerable Product	Search on Vulmon	Subscribe to Product
freerdp freerdp 2.0.0
debian debian linux 8.0
debian debian linux 9.0

Debian Bug report logs - #869880 CVE-2017-2834 CVE-2017-2835 CVE-2017-2836 CVE-2017-2837 CVE-2017-2838 CVE-2017-2839 Package: src:freerdp; Maintainer for src:freerdp is Debian Remote Maintainers <pkg-remote-team@listsaliothdebianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Thu, 27 Jul 2017 11:24:04 ...

Several security issues were fixed in FreeRDP ...

Tyler Bohan of Talos discovered that FreeRDP, a free implementation of the Remote Desktop Protocol (RDP), contained several vulnerabilities that allowed a malicious remote server or a man-in-the-middle to either cause a DoS by forcibly terminating the client, or execute arbitrary code on the client side For the oldstable distribution (jessie), the ...

An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 200-beta1+android11 A specially crafted challenge packet can cause the program termination leading to a denial of service condition An attacker can compromise the server or use man in the middle to trigger this vulnerability ...

CWE-190 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0339 https://www.debian.org/security/2017/dsa-3923 http://www.securityfocus.com/bid/99942 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869880 https://usn.ubuntu.com/3380-1/https://nvd.nist.gov

CVE-2017-2837

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect