Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 554
Alerts This Week
Warning Icon 1 554

Ubuntu 18.04 LTS: USN-4382-2 Critical FreeRDP DoS and Exploits

ubuntu
Calendar Grey November 26, 2020
Dist Ubuntu Esm H88
Ubuntu Security Announcement USN-4382-1 reports vulnerabilities in FreeRDP impacting Ubuntu 18.04, necessitating immediate updates.
Several security issues were fixed in FreeRDP.

Summary

Several security issues were fixed in FreeRDP.

Software Description:

- freerdp: RDP client for Windows Terminal Services

Details:

It was discovered that FreeRDP incorrectly handled certain memory

operations. A remote attacker could use this issue to cause FreeRDP to

crash, resulting in a denial of service, or possibly execute arbitrary

code.

Topics%20covered

Topics Covered

security advisory remote code execution doS ubuntu freeRDP

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
  libfreerdp-client1.1
1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2
  libfreerdp-common1.1.0
1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2
  libfreerdp-core1.1
1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4382-2

https://ubuntu.com/security/notices/USN-4382-1

CVE-2020-11042, CVE-2020-11045, CVE-2020-11046, CVE-2020-11048,

CVE-2020-11058, CVE-2020-11521, CVE-2020-11522, CVE-2020-11523,

CVE-2020-11525, CVE-2020-11526, CVE-2020-13396, CVE-2020-13397,

CVE-2020-13398

Severity
critical
Lowest
Low
Medium
High
Critical

November 26, 2020

Topics%20covered

Topics Covered

security advisory remote code execution doS ubuntu freeRDP

Package Information

https://launchpad.net/ubuntu/+source/freerdp/1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.