Test Kennung:	1.3.6.1.4.1.25623.1.0.843272
Kategorie:	Ubuntu Local Security Checks
Titel:	Ubuntu Update for freerdp USN-3380-1
Zusammenfassung:	The remote host is missing an update for the 'freerdp'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'freerdp' package(s) announced via the referenced advisory. Vulnerability Insight: It was discovered that FreeRDP incorrectly handled certain width and height values. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only applied to Ubuntu 14.04 LTS. (CVE-2014-0250) It was discovered that FreeRDP incorrectly handled certain values in a Scope List. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2014-0791) Tyler Bohan discovered that FreeRDP incorrectly handled certain length values. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-2834, CVE-2017-2835) Tyler Bohan discovered that FreeRDP incorrectly handled certain packets. A malicious server could possibly use this issue to cause FreeRDP to crash, resulting in a denial of service. (CVE-2017-2836, CVE-2017-2837, CVE-2017-2838, CVE-2017-2839) Affected Software/OS: freerdp on Ubuntu 17.04, Ubuntu 16.04 LTS, Ubuntu 14.04 LTS Solution: Please Install the Updated Packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2014-0250 BugTraq ID: 67670 http://www.securityfocus.com/bid/67670 http://security.gentoo.org/glsa/glsa-201412-18.xml http://www.mandriva.com/security/advisories?name=MDVSA-2015:171 https://github.com/FreeRDP/FreeRDP/issues/1871 http://seclists.org/oss-sec/2014/q2/365 SuSE Security Announcement: openSUSE-SU-2014:0862 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-07/msg00008.html Common Vulnerability Exposure (CVE) ID: CVE-2014-0791 https://bugzilla.redhat.com/show_bug.cgi?id=998941 https://github.com/FreeRDP/FreeRDP/pull/1649 https://github.com/sidhpurwala-huzaifa/FreeRDP/commit/e2745807c4c3e0a590c0f69a9b655dc74ebaa03e https://lists.debian.org/debian-lts-announce/2020/08/msg00054.html http://openwall.com/lists/oss-security/2014/01/02/5 http://openwall.com/lists/oss-security/2014/01/03/4 SuSE Security Announcement: openSUSE-SU-2016:2400 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-09/msg00101.html SuSE Security Announcement: openSUSE-SU-2016:2402 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-09/msg00102.html Common Vulnerability Exposure (CVE) ID: CVE-2017-2834 BugTraq ID: 99942 http://www.securityfocus.com/bid/99942 Debian Security Information: DSA-3923 (Google Search) https://www.debian.org/security/2017/dsa-3923 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0336 Common Vulnerability Exposure (CVE) ID: CVE-2017-2835 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0337 Common Vulnerability Exposure (CVE) ID: CVE-2017-2836 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0338 Common Vulnerability Exposure (CVE) ID: CVE-2017-2837 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0339 Common Vulnerability Exposure (CVE) ID: CVE-2017-2838 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0340 Common Vulnerability Exposure (CVE) ID: CVE-2017-2839 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0341
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.