Linux · Ubuntu · Package update · May 29, 2020

libfreerdp-server2-2 2.1.1+dfsg1-0ubuntu0.18.04.1: libfreerdp-server2-2 2.1.1+dfsg1-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)

libfreerdp-server2-2 2.1.1+dfsg1-0ubuntu0.18.04.1, released May 29, 2020, fixes 32 CVEs in libfreerdp-server2-2. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
32
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0272
86th percentile

Priority of the 32 CVEs

Patch now 0 Urgent 0 High 5 Routine 27

Fixed package versions

ProductReleaseFixed in
libfreerdp-server2-2Ubuntu 18.04.6 LTS (bionic)2.1.1+dfsg1-0ubuntu0.18.04.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2020-13396 freerdp: ELSA-2020-4647: freerdp and vinagre security, bug fix, and enhancement update (MODERATE)7.1 0.0234 None reported
High CVE-2020-13398 freerdp2-shadow-x11: An issue was discovered in FreeRDP before 2.1.18.3 0.0233 None reported
High CVE-2020-11523 freerdp: Fix integer overflow in region.c (#1837633)9.8 0.0200 None reported
High CVE-2020-11521 freerdp: Fix out-of-bounds write in planar.c (#1837632)9.8 0.0194 None reported
High CVE-2020-11524 freerdp: Fix out-of-bounds write in interleaved.c (#1837631)9.8 0.0184 None reported
Routine CVE-2020-11522 libwinpr2-2: libfreerdp/gdi/gdi.c in FreeRDP > 1.0 through 2.0.0-rc4 has an Out-of-bounds Read.6.5 0.0272 None reported
Routine CVE-2019-17177 freerdp2-shadow-x11: libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied real...n/a 0.0269 None reported
Routine CVE-2018-1000852 freerdp2-shadow-x11: FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Un...n/a 0.0267 None reported
Routine CVE-2020-11019 freerdp: ELSA-2020-4647: freerdp and vinagre security, bug fix, and enhancement update (MODERATE)6.5 0.0228 None reported
Routine CVE-2020-11526 freerdp: ELSA-2020-4647: freerdp and vinagre security, bug fix, and enhancement update (MODERATE)2.2 0.0192 None reported
Routine CVE-2020-11043 freerdp: ELSA-2020-4647: freerdp and vinagre security, bug fix, and enhancement update (MODERATE)2.7 0.0188 None reported
Routine CVE-2020-11018 freerdp: ELSA-2020-4647: freerdp and vinagre security, bug fix, and enhancement update (MODERATE)6.5 0.0182 None reported
Routine CVE-2020-11048 freerdp: ELSA-2020-4647: freerdp and vinagre security, bug fix, and enhancement update (MODERATE)2.2 0.0178 None reported
Routine CVE-2020-11042 freerdp: ELSA-2020-4647: freerdp and vinagre security, bug fix, and enhancement update (MODERATE)5.9 0.0170 None reported
Routine CVE-2020-11044 freerdp: ELSA-2020-4647: freerdp and vinagre security, bug fix, and enhancement update (MODERATE)2.2 0.0169 None reported
Routine CVE-2020-11085 freerdp: ELSA-2020-4647: freerdp and vinagre security, bug fix, and enhancement update (MODERATE)3.5 0.0168 None reported
Routine CVE-2020-11525 freerdp-x11: libfreerdp/cache/bitmap.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out of bounds read.2.2 0.0168 None reported
Routine CVE-2020-11017 libwinpr2-2: In FreeRDP less than or equal to 2.0.0, by providing manipulated input a malicious client can create a double free co...n/a 0.0166 None reported
Routine CVE-2020-11047 freerdp: ELSA-2020-4647: freerdp and vinagre security, bug fix, and enhancement update (MODERATE)5.9 0.0165 None reported
Routine CVE-2020-11045 freerdp: ELSA-2020-4647: freerdp and vinagre security, bug fix, and enhancement update (MODERATE)3.3 0.0163 None reported
Routine CVE-2020-11058 freerdp: ELSA-2020-4647: freerdp and vinagre security, bug fix, and enhancement update (MODERATE)2.2 0.0155 None reported
Routine CVE-2020-11040 freerdp: ELSA-2020-4647: freerdp and vinagre security, bug fix, and enhancement update (MODERATE)2.7 0.0155 None reported
Routine CVE-2020-11049 freerdp: ELSA-2020-4647: freerdp and vinagre security, bug fix, and enhancement update (MODERATE)2.2 0.0152 None reported
Routine CVE-2020-11088 freerdp: ELSA-2020-4647: freerdp and vinagre security, bug fix, and enhancement update (MODERATE)5.4 0.0143 None reported
Routine CVE-2020-11041 freerdp: ELSA-2020-4647: freerdp and vinagre security, bug fix, and enhancement update (MODERATE)2.7 0.0138 None reported
Showing 1 to 25 of 32 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.