CVE-2018-1000852

freerdp2-shadow-x11: FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Un...

CVE-2018-1000852 is fixed in 12 products on 1 platform, first by freerdp2-shadow-x11 2.1.1+dfsg1-0ubuntu0.18.04.1, released May 29, 2020. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0267
85th percentile

FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvc_main.c, drdynvc_process_capability_request that can result in The RDP server can read the client's memory.. This attack appear to be exploitable via RDPClient must connect the rdp server with echo option. This vulnerability appears to have been fixed in after commit 205c612820dac644d665b5bb1cdf437dc5ca01e3.

Where it's fixed

ProductFixed inFixReleased
Linux
freerdp2-shadow-x11 · Ubuntu 18.04.6 LTS (bionic) 2.1.1+dfsg1-0ubuntu0.18.04.1 freerdp2-shadow-x11 2.1.1+dfsg1-0ubuntu0.18.04.1 May 29, 2020
freerdp2-wayland · Ubuntu 18.04.6 LTS (bionic) 2.1.1+dfsg1-0ubuntu0.18.04.1 freerdp2-wayland 2.1.1+dfsg1-0ubuntu0.18.04.1 May 29, 2020
freerdp2-x11 · Ubuntu 18.04.6 LTS (bionic) 2.1.1+dfsg1-0ubuntu0.18.04.1 freerdp2-x11 2.1.1+dfsg1-0ubuntu0.18.04.1 May 29, 2020
libfreerdp-client2-2 · Ubuntu 18.04.6 LTS (bionic) 2.1.1+dfsg1-0ubuntu0.18.04.1 libfreerdp-client2-2 2.1.1+dfsg1-0ubuntu0.18.04.1 May 29, 2020
libfreerdp-server2-2 · Ubuntu 18.04.6 LTS (bionic) 2.1.1+dfsg1-0ubuntu0.18.04.1 libfreerdp-server2-2 2.1.1+dfsg1-0ubuntu0.18.04.1 May 29, 2020
libfreerdp-shadow-subsystem2-2 · Ubuntu 18.04.6 LTS (bionic) 2.1.1+dfsg1-0ubuntu0.18.04.1 libfreerdp-shadow-subsystem2-2 2.1.1+dfsg1-0ubuntu0.18.04.1 May 29, 2020
libfreerdp-shadow2-2 · Ubuntu 18.04.6 LTS (bionic) 2.1.1+dfsg1-0ubuntu0.18.04.1 libfreerdp-shadow2-2 2.1.1+dfsg1-0ubuntu0.18.04.1 May 29, 2020
libfreerdp2-2 · Ubuntu 18.04.6 LTS (bionic) 2.1.1+dfsg1-0ubuntu0.18.04.1 libfreerdp2-2 2.1.1+dfsg1-0ubuntu0.18.04.1 May 29, 2020
libuwac0-0 · Ubuntu 18.04.6 LTS (bionic) 2.1.1+dfsg1-0ubuntu0.18.04.1 libuwac0-0 2.1.1+dfsg1-0ubuntu0.18.04.1 May 29, 2020
libwinpr-tools2-2 · Ubuntu 18.04.6 LTS (bionic) 2.1.1+dfsg1-0ubuntu0.18.04.1 libwinpr-tools2-2 2.1.1+dfsg1-0ubuntu0.18.04.1 May 29, 2020
libwinpr2-2 · Ubuntu 18.04.6 LTS (bionic) 2.1.1+dfsg1-0ubuntu0.18.04.1 libwinpr2-2 2.1.1+dfsg1-0ubuntu0.18.04.1 May 29, 2020
winpr-utils · Ubuntu 18.04.6 LTS (bionic) 2.1.1+dfsg1-0ubuntu0.18.04.1 winpr-utils 2.1.1+dfsg1-0ubuntu0.18.04.1 May 29, 2020

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.