Total vulnerabilities in the database
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the progressive_decompress function. This issue is likely down to incorrect calculations of the nXSrc and nYSrc variables. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. there are no known workarounds for this vulnerability.
| Software | From | Fixed in |
|---|---|---|
| freerdp / freerdp | 3.0.0-beta1 | 3.0.0-beta1.x |
| freerdp / freerdp | 3.0.0-beta2 | 3.0.0-beta2.x |
| freerdp / freerdp | - | 2.11.0 |
| debian / debian_linux | 10.0 | 10.0.x |
| fedoraproject / fedora | 37 | 37.x |
| fedoraproject / fedora | 38 | 38.x |
| fedoraproject / fedora | 39 | 39.x |