FreeRDP may read and display out of bounds data
Résumé
FreeRDP may read and display out of bounds data
Description d'origine
La description telle que publiée par la source (souvent en anglais).
FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the /video command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations are not affected. This issue has been patched in version 2.8.1. If you cannot upgrade do not use the /video switch.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2022-39283 freerdp2 Corrigé dans: 2.3.0+dfsg1-2+deb11u2
Références
- advisory github.com
- advisory github.com
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- advisory security.gentoo.org
- web github.com
- web lists.debian.org
- web lists.debian.org