Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 427
Alerts This Week
Warning Icon 1 427

SUSE Linux Enterprise 12: 2017:2234-1 Important: FreeRDP DoS

suse
Calendar Grey August 22, 2017
Dist Suse Esm H88
SUSE Security Patch for openssl tackles various vulnerabilities, enhancing software robustness and reliability.
An update that fixes 6 vulnerabilities is now available

Summary

This update for freerdp fixes the following issues: - CVE-2017-2834: Out-of-bounds write in license_recv() (bsc#1050714) - CVE-2017-2835: Out-of-bounds write in rdp_recv_tpkt_pdu (bsc#1050712) - CVE-2017-2836: Rdp Client Read Server Proprietary Certificate Denial of Service (bsc#1050699) - CVE-2017-2837: Client GCC Read Server Security Data DoS (bsc#1050704) - CVE-2017-2838: Client License Read Product Info Denial of Service Vulnerability (bsc#1050708) - CVE-2017-2839: Client License Read Challenge Packet Denial of Service (bsc#1050711) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Workstation Extension 12-SP3: zypper in -t patch SUSE-SLE-WE-12-SP3-2017-1365=1

Topics%20covered

Topics Covered

security advisory DoS security patch important update SUSE Linux Enterprise freerdp

References

#1050699 #1050704 #1050708 #1050711 #1050712

#1050714

Cross- CVE-2017-2834 CVE-2017-2835 CVE-2017-2836

CVE-2017-2837 CVE-2017-2838 CVE-2017-2839

Affected Products:

SUSE Linux Enterprise Workstation Extension 12-SP3

SUSE Linux Enterprise Workstation Extension 12-SP2

SUSE Linux Enterprise Software Development Kit 12-SP3

SUSE Linux Enterprise Software Development Kit 12-SP2

SUSE Linux Enterprise Desktop 12-SP3

SUSE Linux Enterprise Desktop 12-SP2

https://www.suse.com/security/cve/CVE-2017-2834.html

https://www.suse.com/security/cve/CVE-2017-2835.html

https://www.suse.com/security/cve/CVE-2017-2836.html

https://www.suse.com/security/cve/CVE-2017-2837.html

https://www.suse.com/security/cve/CVE-2017-2838.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2017:2234-1
Rating: important

Topics%20covered

Topics Covered

security advisory DoS security patch important update SUSE Linux Enterprise freerdp

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.