USN-4481-1: FreeRDP vulnerabilities

Releases

• Ubuntu 20.04 LTS
• Ubuntu 18.04 ESM

Packages

• freerdp2 - RDP client for Windows Terminal Services

Details

It was discovered that FreeRDP incorrectly handled certain memory
operations. A remote attacker could use this issue to cause FreeRDP to
crash, resulting in a denial of service, or possibly execute arbitrary
code.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 20.04

• libfreerdp-client2-2 - 2.2.0+dfsg1-0ubuntu0.20.04.1
• libfreerdp-server2-2 - 2.2.0+dfsg1-0ubuntu0.20.04.1
• libfreerdp2-2 - 2.2.0+dfsg1-0ubuntu0.20.04.1

Ubuntu 18.04

• libfreerdp-client2-2 - 2.2.0+dfsg1-0ubuntu0.18.04.1
• libfreerdp-server2-2 - 2.2.0+dfsg1-0ubuntu0.18.04.1
• libfreerdp2-2 - 2.2.0+dfsg1-0ubuntu0.18.04.1

This update uses a new upstream release, which includes additional bug
fixes. In general, a standard system update will make all the necessary
changes.

References

• CVE-2020-11095
• CVE-2020-11096
• CVE-2020-11097
• CVE-2020-11098
• CVE-2020-11099
• CVE-2020-15103
• CVE-2020-4030
• CVE-2020-4031
• CVE-2020-4032
• CVE-2020-4033