vinagre (AlmaLinux:8) — known CVEs & security advisories
Known CVE vulnerabilities and GitHub Security Advisories affecting the AlmaLinux:8 package vinagre, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (25)
CVE-2020-11039 — CVSS 8.0 (high): In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled (nearly) arbitrary memory can be read…
CVE-2020-13396 — CVSS 7.1 (high): An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in ntlm_read_ChallengeMessage…
CVE-2020-11038 — CVSS 6.9 (medium): In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a manipulated server…
CVE-2020-11018 — CVSS 6.5 (medium): In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out…
CVE-2020-13397 — CVSS 5.5 (medium): An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in security_fips_decrypt in…
CVE-2020-11042 — CVSS 5.5 (medium): In FreeRDP greater than 1.1 and before 2.0.0, there is an out-of-bounds read in update_read_icon_info. It allows reading a attacker-defined…
CVE-2020-11046 — CVSS 5.5 (medium): In FreeRDP after 1.0 and before 2.0.0, there is a stream out-of-bounds seek in update_read_synchronize that could lead to a later…
CVE-2020-11047 — CVSS 5.5 (medium): In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bounds read in autodetect_recv_bandwidth_measure_results. A malicious server can…
CVE-2020-11049 — CVSS 5.5 (medium): In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bound read of client memory that is then passed on to the protocol parser. This…
CVE-2020-11019 — CVSS 4.3 (medium): In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application could occur due to a…
CVE-2020-11089 — CVSS 3.7 (low): In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions (parallel_process_irp_create, serial_process_irp_create…
CVE-2020-11086 — CVSS 3.1 (low): In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_ntlm_v2_client_challenge that reads up to 28 bytes…
CVE-2020-11087 — CVSS 3.1 (low): In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_AuthenticateMessage. This has been fixed in 2.1.0.
CVE-2020-11088 — CVSS 3.1 (low): In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_NegotiateMessage. This has been fixed in 2.1.0.
CVE-2020-11085 — CVSS 2.6 (low): In FreeRDP before 2.1.0, there is an out-of-bounds read in cliprdr_read_format_list. Clipboard format data read (by client or server) might…
CVE-2020-11043 — CVSS 2.2 (low): In FreeRDP less than or equal to 2.0.0, there is an out-of-bounds read in rfx_process_message_tileset. Invalid data fed to RFX decoder…
CVE-2020-11044 — CVSS 2.2 (low): In FreeRDP greater than 1.2 and before 2.0.0, a double free in update_read_cache_bitmap_v3_order crashes the client application if…
CVE-2020-11526 — CVSS 2.2 (low): libfreerdp/core/update.c in FreeRDP versions > 1.1 through 2.0.0-rc4 has an Out-of-bounds Read.
CVE-2020-11045 — CVSS 2.2 (low): In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bound read in in update_read_bitmap_data that allows client memory to be read to…
CVE-2020-11040 — CVSS 2.2 (low): In FreeRDP less than or equal to 2.0.0, there is an out-of-bound data read from memory in clear_decompress_subcode_rlex, visualized on…
CVE-2020-11048 — CVSS 2.2 (low): In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bounds read. It only allows to abort a session. No data extraction is possible…
CVE-2020-11058 — CVSS 2.2 (low): In FreeRDP after 1.1 and before 2.0.0, a stream out-of-bounds seek in rdp_read_font_capability_set could lead to a later out-of-bounds…
CVE-2020-11041 — CVSS 2.2 (low): In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound…
CVE-2020-11525 — CVSS 2.2 (low): libfreerdp/cache/bitmap.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out of bounds read.