Linux · Security advisory · November 4, 2020
RHSA-2020:4647: Security update for 6 packages
RHSA-2020:4647, released November 4, 2020, fixes 25 CVEs across 6 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
25
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0272
86th percentile
Priority of the 25 CVEs
Patch now 0
Urgent 0
High 1
Routine 24
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| freerdp | RHEL 8 | 2:2.1.1-1.el8 |
| freerdp-devel | RHEL 8 | 2:2.1.1-1.el8 |
| freerdp-libs | RHEL 8 | 2:2.1.1-1.el8 |
| libwinpr | RHEL 8 | 2:2.1.1-1.el8 |
| libwinpr-devel | RHEL 8 | 2:2.1.1-1.el8 |
| vinagre | RHEL 8 | 0:3.22.0-23.el8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2020-13396 | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 7.1 | 0.0234 | None reported | |
| Routine | CVE-2020-11522 | libwinpr2-2: libfreerdp/gdi/gdi.c in FreeRDP > 1.0 through 2.0.0-rc4 has an Out-of-bounds Read. | 6.5 | 0.0272 | None reported | |
| Routine | CVE-2020-11019 | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 6.5 | 0.0228 | None reported | |
| Routine | CVE-2020-11526 | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 2.2 | 0.0200 | None reported | |
| Routine | CVE-2020-11043 | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 2.7 | 0.0196 | None reported | |
| Routine | CVE-2020-11018 | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 6.5 | 0.0190 | None reported | |
| Routine | CVE-2020-11048 | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 2.2 | 0.0185 | None reported | |
| Routine | CVE-2020-11042 | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 5.9 | 0.0177 | None reported | |
| Routine | CVE-2020-11085 | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 3.5 | 0.0175 | None reported | |
| Routine | CVE-2020-11047 | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 5.9 | 0.0171 | None reported | |
| Routine | CVE-2020-11045 | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 3.3 | 0.0170 | None reported | |
| Routine | CVE-2020-11044 | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 2.2 | 0.0169 | None reported | |
| Routine | CVE-2020-11525 | freerdp-x11: libfreerdp/cache/bitmap.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out of bounds read. | 2.2 | 0.0168 | None reported | |
| Routine | CVE-2020-11058 | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 2.2 | 0.0161 | None reported | |
| Routine | CVE-2020-11040 | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 2.7 | 0.0161 | None reported | |
| Routine | CVE-2020-11049 | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 2.2 | 0.0152 | None reported | |
| Routine | CVE-2020-11086 | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 5.4 | 0.0143 | None reported | |
| Routine | CVE-2020-11087 | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 5.4 | 0.0143 | None reported | |
| Routine | CVE-2020-11088 | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 5.4 | 0.0143 | None reported | |
| Routine | CVE-2020-11041 | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 2.7 | 0.0138 | None reported | |
| Routine | CVE-2020-11046 | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 2.2 | 0.0132 | None reported | |
| Routine | CVE-2020-11038 | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 5.4 | 0.0121 | None reported | |
| Routine | CVE-2020-11089 | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 5.5 | 0.0115 | None reported | |
| Routine | CVE-2020-11039 | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 6.8 | 0.0113 | None reported | |
| Routine | CVE-2020-13397 | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 6.1 | 0.0054 | None reported |
Showing 1 to 25 of 25
1