MGASA-2017-0243

Dashboard / Vulnerabilities / MGASA-2017-0243

MGASA-2017-0243

Summary: Updated freerdp packages fix security vulnerabilities

Details: An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle attack to trigger this vulnerability (CVE-2017-2834). An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle to trigger this vulnerability (CVE-2017-2835). An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability (CVE-2017-2836). An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability (CVE-2017-2837). An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability (CVE-2017-2838, CVE-2017-2839).

References: https://advisories.mageia.org/MGASA-2017-0243.html, https://bugs.mageia.org/show_bug.cgi?id=21427, https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0336, https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0337, https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0338, https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0339, https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0340, https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0341, http://blog.talosintelligence.com/2017/07/vulnerbility-spotlight-freerdp-multiple.html, https://lists.fedoraproject.org/archives/list/[email protected]/thread/JNO6AUPEMWZQNGI7PEVPRUZD3OFNCQ4R/