Your submission was sent successfully! Close

CVE-2021-41160

Published: 21 October 2021

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0` width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not allocated) region. This issue has been patched in FreeRDP 2.4.1.

Priority

Medium

CVSS 3 base score: 8.8

Status

Package Release Status
freerdp
Launchpad, Ubuntu, Debian
bionic Needs triage

trusty Ignored
(out of standard support)
upstream Needs triage

xenial Needs triage

freerdp2
Launchpad, Ubuntu, Debian
bionic
Released (2.2.0+dfsg1-0ubuntu0.18.04.2)
focal
Released (2.2.0+dfsg1-0ubuntu0.20.04.2)
hirsute
Released (2.3.0+dfsg1-1ubuntu0.1)
impish
Released (2.3.0+dfsg1-2ubuntu0.1)
jammy
Released (2.3.0+dfsg1-2ubuntu2)
trusty Ignored
(out of standard support)
upstream Needs triage

xenial Ignored
(out of standard support)
Patches:
upstream: https://github.com/FreeRDP/FreeRDP/commit/217e0caa181fc1690cf84dd6a3ba1a4f90c02692