Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
freerdp-2.4.0-2.1 on GA media
Notes
Title of the patch
freerdp-2.4.0-2.1 on GA media
Description of the patch
These are all security issues fixed in the freerdp-2.4.0-2.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-10768
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "freerdp-2.4.0-2.1 on GA media", title: "Title of the patch", }, { category: "description", text: "These are all security issues fixed in the freerdp-2.4.0-2.1 package on the GA media of openSUSE Tumbleweed.", title: "Description of the patch", }, { category: "details", text: "openSUSE-Tumbleweed-2024-10768", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10768-1.json", }, { category: "self", summary: "SUSE CVE CVE-2017-2834 page", url: "https://www.suse.com/security/cve/CVE-2017-2834/", }, { category: "self", summary: "SUSE CVE CVE-2017-2835 page", url: "https://www.suse.com/security/cve/CVE-2017-2835/", }, { category: "self", summary: "SUSE CVE CVE-2017-2836 page", url: "https://www.suse.com/security/cve/CVE-2017-2836/", }, { category: "self", summary: "SUSE CVE CVE-2017-2837 page", url: "https://www.suse.com/security/cve/CVE-2017-2837/", }, { category: "self", summary: "SUSE CVE CVE-2017-2838 page", url: "https://www.suse.com/security/cve/CVE-2017-2838/", }, { category: "self", summary: "SUSE CVE CVE-2017-2839 page", url: "https://www.suse.com/security/cve/CVE-2017-2839/", }, { category: "self", summary: "SUSE CVE CVE-2018-0886 page", url: "https://www.suse.com/security/cve/CVE-2018-0886/", }, { category: "self", summary: "SUSE CVE CVE-2018-1000852 page", url: "https://www.suse.com/security/cve/CVE-2018-1000852/", }, { category: "self", summary: "SUSE CVE CVE-2018-8784 page", url: "https://www.suse.com/security/cve/CVE-2018-8784/", }, { category: "self", summary: "SUSE CVE CVE-2018-8785 page", url: "https://www.suse.com/security/cve/CVE-2018-8785/", }, { category: "self", summary: "SUSE CVE CVE-2018-8786 page", url: "https://www.suse.com/security/cve/CVE-2018-8786/", }, { category: "self", summary: "SUSE CVE CVE-2018-8787 page", url: "https://www.suse.com/security/cve/CVE-2018-8787/", }, { category: "self", summary: "SUSE CVE CVE-2018-8788 page", url: "https://www.suse.com/security/cve/CVE-2018-8788/", }, { category: "self", summary: "SUSE CVE CVE-2018-8789 page", url: "https://www.suse.com/security/cve/CVE-2018-8789/", }, { category: "self", summary: "SUSE CVE CVE-2019-17177 page", url: "https://www.suse.com/security/cve/CVE-2019-17177/", }, { category: "self", summary: "SUSE CVE CVE-2020-11017 page", url: "https://www.suse.com/security/cve/CVE-2020-11017/", }, { category: "self", summary: "SUSE CVE CVE-2020-11018 page", url: "https://www.suse.com/security/cve/CVE-2020-11018/", }, { category: "self", summary: "SUSE CVE CVE-2020-11019 page", url: "https://www.suse.com/security/cve/CVE-2020-11019/", }, { category: "self", summary: "SUSE CVE CVE-2020-11038 page", url: "https://www.suse.com/security/cve/CVE-2020-11038/", }, { category: "self", summary: "SUSE CVE CVE-2020-11039 page", url: "https://www.suse.com/security/cve/CVE-2020-11039/", }, { category: "self", summary: "SUSE CVE CVE-2020-11040 page", url: "https://www.suse.com/security/cve/CVE-2020-11040/", }, { category: "self", summary: "SUSE CVE CVE-2020-11041 page", url: "https://www.suse.com/security/cve/CVE-2020-11041/", }, { category: "self", summary: "SUSE CVE CVE-2020-11043 page", url: "https://www.suse.com/security/cve/CVE-2020-11043/", }, { category: "self", summary: "SUSE CVE CVE-2020-11095 page", url: "https://www.suse.com/security/cve/CVE-2020-11095/", }, { category: "self", summary: "SUSE CVE CVE-2020-11096 page", url: "https://www.suse.com/security/cve/CVE-2020-11096/", }, { category: "self", summary: "SUSE CVE CVE-2020-11097 page", url: "https://www.suse.com/security/cve/CVE-2020-11097/", }, { category: "self", summary: "SUSE CVE CVE-2020-11098 page", url: "https://www.suse.com/security/cve/CVE-2020-11098/", }, { category: "self", summary: "SUSE CVE CVE-2020-11099 page", url: "https://www.suse.com/security/cve/CVE-2020-11099/", }, { category: "self", summary: "SUSE CVE CVE-2020-11521 page", url: "https://www.suse.com/security/cve/CVE-2020-11521/", }, { category: "self", summary: "SUSE CVE CVE-2020-11522 page", url: "https://www.suse.com/security/cve/CVE-2020-11522/", }, { category: "self", summary: "SUSE CVE CVE-2020-11523 page", url: "https://www.suse.com/security/cve/CVE-2020-11523/", }, { category: "self", summary: "SUSE CVE CVE-2020-11524 page", url: "https://www.suse.com/security/cve/CVE-2020-11524/", }, { category: "self", summary: "SUSE CVE CVE-2020-11525 page", url: "https://www.suse.com/security/cve/CVE-2020-11525/", }, { category: "self", summary: "SUSE CVE CVE-2020-11526 page", url: "https://www.suse.com/security/cve/CVE-2020-11526/", }, { category: "self", summary: "SUSE CVE CVE-2020-13396 page", url: "https://www.suse.com/security/cve/CVE-2020-13396/", }, { category: "self", summary: "SUSE CVE CVE-2020-13397 page", url: "https://www.suse.com/security/cve/CVE-2020-13397/", }, { category: "self", summary: "SUSE CVE CVE-2020-13398 page", url: "https://www.suse.com/security/cve/CVE-2020-13398/", }, { category: "self", summary: "SUSE CVE CVE-2020-15103 page", url: "https://www.suse.com/security/cve/CVE-2020-15103/", }, { category: "self", summary: "SUSE CVE CVE-2020-4030 page", url: "https://www.suse.com/security/cve/CVE-2020-4030/", }, { category: "self", summary: "SUSE CVE CVE-2020-4031 page", url: "https://www.suse.com/security/cve/CVE-2020-4031/", }, { category: "self", summary: "SUSE CVE CVE-2020-4032 page", url: "https://www.suse.com/security/cve/CVE-2020-4032/", }, { category: "self", summary: "SUSE CVE CVE-2020-4033 page", url: "https://www.suse.com/security/cve/CVE-2020-4033/", }, ], title: "freerdp-2.4.0-2.1 on GA media", tracking: { current_release_date: "2024-06-15T00:00:00Z", generator: { date: "2024-06-15T00:00:00Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "openSUSE-SU-2024:10768-1", initial_release_date: "2024-06-15T00:00:00Z", revision_history: [ { date: "2024-06-15T00:00:00Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "freerdp-2.4.0-2.1.aarch64", product: { name: "freerdp-2.4.0-2.1.aarch64", product_id: "freerdp-2.4.0-2.1.aarch64", }, }, { category: "product_version", name: "freerdp-devel-2.4.0-2.1.aarch64", product: { name: "freerdp-devel-2.4.0-2.1.aarch64", product_id: "freerdp-devel-2.4.0-2.1.aarch64", }, }, { category: "product_version", name: "freerdp-proxy-2.4.0-2.1.aarch64", product: { name: "freerdp-proxy-2.4.0-2.1.aarch64", product_id: "freerdp-proxy-2.4.0-2.1.aarch64", }, }, { category: "product_version", name: "freerdp-server-2.4.0-2.1.aarch64", product: { name: "freerdp-server-2.4.0-2.1.aarch64", product_id: "freerdp-server-2.4.0-2.1.aarch64", }, }, { category: "product_version", name: "freerdp-wayland-2.4.0-2.1.aarch64", product: { name: "freerdp-wayland-2.4.0-2.1.aarch64", product_id: "freerdp-wayland-2.4.0-2.1.aarch64", }, }, { category: "product_version", name: "libfreerdp2-2.4.0-2.1.aarch64", product: { name: "libfreerdp2-2.4.0-2.1.aarch64", product_id: "libfreerdp2-2.4.0-2.1.aarch64", }, }, { category: "product_version", name: "libuwac0-0-2.4.0-2.1.aarch64", product: { name: "libuwac0-0-2.4.0-2.1.aarch64", product_id: "libuwac0-0-2.4.0-2.1.aarch64", }, }, { category: "product_version", name: "libwinpr2-2.4.0-2.1.aarch64", product: { name: "libwinpr2-2.4.0-2.1.aarch64", product_id: "libwinpr2-2.4.0-2.1.aarch64", }, }, { category: "product_version", name: "uwac0-0-devel-2.4.0-2.1.aarch64", product: { name: "uwac0-0-devel-2.4.0-2.1.aarch64", product_id: "uwac0-0-devel-2.4.0-2.1.aarch64", }, }, { category: "product_version", name: "winpr2-devel-2.4.0-2.1.aarch64", product: { name: "winpr2-devel-2.4.0-2.1.aarch64", product_id: "winpr2-devel-2.4.0-2.1.aarch64", }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "freerdp-2.4.0-2.1.ppc64le", product: { name: "freerdp-2.4.0-2.1.ppc64le", product_id: "freerdp-2.4.0-2.1.ppc64le", }, }, { category: "product_version", name: "freerdp-devel-2.4.0-2.1.ppc64le", product: { name: "freerdp-devel-2.4.0-2.1.ppc64le", product_id: "freerdp-devel-2.4.0-2.1.ppc64le", }, }, { category: "product_version", name: "freerdp-proxy-2.4.0-2.1.ppc64le", product: { name: "freerdp-proxy-2.4.0-2.1.ppc64le", product_id: "freerdp-proxy-2.4.0-2.1.ppc64le", }, }, { category: "product_version", name: "freerdp-server-2.4.0-2.1.ppc64le", product: { name: "freerdp-server-2.4.0-2.1.ppc64le", product_id: "freerdp-server-2.4.0-2.1.ppc64le", }, }, { category: "product_version", name: "freerdp-wayland-2.4.0-2.1.ppc64le", product: { name: "freerdp-wayland-2.4.0-2.1.ppc64le", product_id: "freerdp-wayland-2.4.0-2.1.ppc64le", }, }, { category: "product_version", name: "libfreerdp2-2.4.0-2.1.ppc64le", product: { name: "libfreerdp2-2.4.0-2.1.ppc64le", product_id: "libfreerdp2-2.4.0-2.1.ppc64le", }, }, { category: "product_version", name: "libuwac0-0-2.4.0-2.1.ppc64le", product: { name: "libuwac0-0-2.4.0-2.1.ppc64le", product_id: "libuwac0-0-2.4.0-2.1.ppc64le", }, }, { category: "product_version", name: "libwinpr2-2.4.0-2.1.ppc64le", product: { name: "libwinpr2-2.4.0-2.1.ppc64le", product_id: "libwinpr2-2.4.0-2.1.ppc64le", }, }, { category: "product_version", name: "uwac0-0-devel-2.4.0-2.1.ppc64le", product: { name: "uwac0-0-devel-2.4.0-2.1.ppc64le", product_id: "uwac0-0-devel-2.4.0-2.1.ppc64le", }, }, { category: "product_version", name: "winpr2-devel-2.4.0-2.1.ppc64le", product: { name: "winpr2-devel-2.4.0-2.1.ppc64le", product_id: "winpr2-devel-2.4.0-2.1.ppc64le", }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "freerdp-2.4.0-2.1.s390x", product: { name: "freerdp-2.4.0-2.1.s390x", product_id: "freerdp-2.4.0-2.1.s390x", }, }, { category: "product_version", name: "freerdp-devel-2.4.0-2.1.s390x", product: { name: "freerdp-devel-2.4.0-2.1.s390x", product_id: "freerdp-devel-2.4.0-2.1.s390x", }, }, { category: "product_version", name: "freerdp-proxy-2.4.0-2.1.s390x", product: { name: "freerdp-proxy-2.4.0-2.1.s390x", product_id: "freerdp-proxy-2.4.0-2.1.s390x", }, }, { category: "product_version", name: "freerdp-server-2.4.0-2.1.s390x", product: { name: "freerdp-server-2.4.0-2.1.s390x", product_id: "freerdp-server-2.4.0-2.1.s390x", }, }, { category: "product_version", name: "freerdp-wayland-2.4.0-2.1.s390x", product: { name: "freerdp-wayland-2.4.0-2.1.s390x", product_id: "freerdp-wayland-2.4.0-2.1.s390x", }, }, { category: "product_version", name: "libfreerdp2-2.4.0-2.1.s390x", product: { name: "libfreerdp2-2.4.0-2.1.s390x", product_id: "libfreerdp2-2.4.0-2.1.s390x", }, }, { category: "product_version", name: "libuwac0-0-2.4.0-2.1.s390x", product: { name: "libuwac0-0-2.4.0-2.1.s390x", product_id: "libuwac0-0-2.4.0-2.1.s390x", }, }, { category: "product_version", name: "libwinpr2-2.4.0-2.1.s390x", product: { name: "libwinpr2-2.4.0-2.1.s390x", product_id: "libwinpr2-2.4.0-2.1.s390x", }, }, { category: "product_version", name: "uwac0-0-devel-2.4.0-2.1.s390x", product: { name: "uwac0-0-devel-2.4.0-2.1.s390x", product_id: "uwac0-0-devel-2.4.0-2.1.s390x", }, }, { category: "product_version", name: "winpr2-devel-2.4.0-2.1.s390x", product: { name: "winpr2-devel-2.4.0-2.1.s390x", product_id: "winpr2-devel-2.4.0-2.1.s390x", }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "freerdp-2.4.0-2.1.x86_64", product: { name: "freerdp-2.4.0-2.1.x86_64", product_id: "freerdp-2.4.0-2.1.x86_64", }, }, { category: "product_version", name: "freerdp-devel-2.4.0-2.1.x86_64", product: { name: "freerdp-devel-2.4.0-2.1.x86_64", product_id: "freerdp-devel-2.4.0-2.1.x86_64", }, }, { category: "product_version", name: "freerdp-proxy-2.4.0-2.1.x86_64", product: { name: "freerdp-proxy-2.4.0-2.1.x86_64", product_id: "freerdp-proxy-2.4.0-2.1.x86_64", }, }, { category: "product_version", name: "freerdp-server-2.4.0-2.1.x86_64", product: { name: "freerdp-server-2.4.0-2.1.x86_64", product_id: "freerdp-server-2.4.0-2.1.x86_64", }, }, { category: "product_version", name: "freerdp-wayland-2.4.0-2.1.x86_64", product: { name: "freerdp-wayland-2.4.0-2.1.x86_64", product_id: "freerdp-wayland-2.4.0-2.1.x86_64", }, }, { category: "product_version", name: "libfreerdp2-2.4.0-2.1.x86_64", product: { name: "libfreerdp2-2.4.0-2.1.x86_64", product_id: "libfreerdp2-2.4.0-2.1.x86_64", }, }, { category: "product_version", name: "libuwac0-0-2.4.0-2.1.x86_64", product: { name: "libuwac0-0-2.4.0-2.1.x86_64", product_id: "libuwac0-0-2.4.0-2.1.x86_64", }, }, { category: "product_version", name: "libwinpr2-2.4.0-2.1.x86_64", product: { name: "libwinpr2-2.4.0-2.1.x86_64", product_id: "libwinpr2-2.4.0-2.1.x86_64", }, }, { category: "product_version", name: "uwac0-0-devel-2.4.0-2.1.x86_64", product: { name: "uwac0-0-devel-2.4.0-2.1.x86_64", product_id: "uwac0-0-devel-2.4.0-2.1.x86_64", }, }, { category: "product_version", name: "winpr2-devel-2.4.0-2.1.x86_64", product: { name: "winpr2-devel-2.4.0-2.1.x86_64", product_id: "winpr2-devel-2.4.0-2.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "openSUSE Tumbleweed", product: { name: "openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed", product_identification_helper: { cpe: "cpe:/o:opensuse:tumbleweed", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "freerdp-2.4.0-2.1.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", }, product_reference: "freerdp-2.4.0-2.1.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "freerdp-2.4.0-2.1.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", }, product_reference: "freerdp-2.4.0-2.1.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "freerdp-2.4.0-2.1.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", }, product_reference: "freerdp-2.4.0-2.1.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "freerdp-2.4.0-2.1.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", }, product_reference: "freerdp-2.4.0-2.1.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "freerdp-devel-2.4.0-2.1.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", }, product_reference: "freerdp-devel-2.4.0-2.1.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "freerdp-devel-2.4.0-2.1.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", }, product_reference: "freerdp-devel-2.4.0-2.1.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "freerdp-devel-2.4.0-2.1.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", }, product_reference: "freerdp-devel-2.4.0-2.1.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "freerdp-devel-2.4.0-2.1.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", }, product_reference: "freerdp-devel-2.4.0-2.1.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "freerdp-proxy-2.4.0-2.1.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", }, product_reference: "freerdp-proxy-2.4.0-2.1.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "freerdp-proxy-2.4.0-2.1.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", }, product_reference: "freerdp-proxy-2.4.0-2.1.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "freerdp-proxy-2.4.0-2.1.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", }, product_reference: "freerdp-proxy-2.4.0-2.1.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "freerdp-proxy-2.4.0-2.1.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", }, product_reference: "freerdp-proxy-2.4.0-2.1.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "freerdp-server-2.4.0-2.1.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", }, product_reference: "freerdp-server-2.4.0-2.1.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "freerdp-server-2.4.0-2.1.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", }, product_reference: "freerdp-server-2.4.0-2.1.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "freerdp-server-2.4.0-2.1.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", }, product_reference: "freerdp-server-2.4.0-2.1.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "freerdp-server-2.4.0-2.1.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", }, product_reference: "freerdp-server-2.4.0-2.1.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "freerdp-wayland-2.4.0-2.1.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", }, product_reference: "freerdp-wayland-2.4.0-2.1.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "freerdp-wayland-2.4.0-2.1.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", }, product_reference: "freerdp-wayland-2.4.0-2.1.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "freerdp-wayland-2.4.0-2.1.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", }, product_reference: "freerdp-wayland-2.4.0-2.1.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "freerdp-wayland-2.4.0-2.1.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", }, product_reference: "freerdp-wayland-2.4.0-2.1.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libfreerdp2-2.4.0-2.1.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", }, product_reference: "libfreerdp2-2.4.0-2.1.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libfreerdp2-2.4.0-2.1.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", }, product_reference: "libfreerdp2-2.4.0-2.1.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libfreerdp2-2.4.0-2.1.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", }, product_reference: "libfreerdp2-2.4.0-2.1.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libfreerdp2-2.4.0-2.1.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", }, product_reference: "libfreerdp2-2.4.0-2.1.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libuwac0-0-2.4.0-2.1.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", }, product_reference: "libuwac0-0-2.4.0-2.1.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libuwac0-0-2.4.0-2.1.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", }, product_reference: "libuwac0-0-2.4.0-2.1.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libuwac0-0-2.4.0-2.1.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", }, product_reference: "libuwac0-0-2.4.0-2.1.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libuwac0-0-2.4.0-2.1.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", }, product_reference: "libuwac0-0-2.4.0-2.1.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libwinpr2-2.4.0-2.1.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", }, product_reference: "libwinpr2-2.4.0-2.1.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libwinpr2-2.4.0-2.1.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", }, product_reference: "libwinpr2-2.4.0-2.1.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libwinpr2-2.4.0-2.1.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", }, product_reference: "libwinpr2-2.4.0-2.1.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "libwinpr2-2.4.0-2.1.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", }, product_reference: "libwinpr2-2.4.0-2.1.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "uwac0-0-devel-2.4.0-2.1.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", }, product_reference: "uwac0-0-devel-2.4.0-2.1.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "uwac0-0-devel-2.4.0-2.1.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", }, product_reference: "uwac0-0-devel-2.4.0-2.1.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "uwac0-0-devel-2.4.0-2.1.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", }, product_reference: "uwac0-0-devel-2.4.0-2.1.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "uwac0-0-devel-2.4.0-2.1.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", }, product_reference: "uwac0-0-devel-2.4.0-2.1.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "winpr2-devel-2.4.0-2.1.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", }, product_reference: "winpr2-devel-2.4.0-2.1.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "winpr2-devel-2.4.0-2.1.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", }, product_reference: "winpr2-devel-2.4.0-2.1.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "winpr2-devel-2.4.0-2.1.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", }, product_reference: "winpr2-devel-2.4.0-2.1.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "winpr2-devel-2.4.0-2.1.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", }, product_reference: "winpr2-devel-2.4.0-2.1.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, ], }, vulnerabilities: [ { cve: "CVE-2017-2834", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-2834", }, ], notes: [ { category: "general", text: "An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle attack to trigger this vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-2834", url: "https://www.suse.com/security/cve/CVE-2017-2834", }, { category: "external", summary: "SUSE Bug 1050714 for CVE-2017-2834", url: "https://bugzilla.suse.com/1050714", }, { category: "external", summary: "SUSE Bug 1053919 for CVE-2017-2834", url: "https://bugzilla.suse.com/1053919", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2017-2834", }, { cve: "CVE-2017-2835", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-2835", }, ], notes: [ { category: "general", text: "An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle to trigger this vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-2835", url: "https://www.suse.com/security/cve/CVE-2017-2835", }, { category: "external", summary: "SUSE Bug 1050712 for CVE-2017-2835", url: "https://bugzilla.suse.com/1050712", }, { category: "external", summary: "SUSE Bug 1053919 for CVE-2017-2835", url: "https://bugzilla.suse.com/1053919", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2017-2835", }, { cve: "CVE-2017-2836", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-2836", }, ], notes: [ { category: "general", text: "An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-2836", url: "https://www.suse.com/security/cve/CVE-2017-2836", }, { category: "external", summary: "SUSE Bug 1050699 for CVE-2017-2836", url: "https://bugzilla.suse.com/1050699", }, { category: "external", summary: "SUSE Bug 1053919 for CVE-2017-2836", url: "https://bugzilla.suse.com/1053919", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-2836", }, { cve: "CVE-2017-2837", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-2837", }, ], notes: [ { category: "general", text: "An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-2837", url: "https://www.suse.com/security/cve/CVE-2017-2837", }, { category: "external", summary: "SUSE Bug 1050704 for CVE-2017-2837", url: "https://bugzilla.suse.com/1050704", }, { category: "external", summary: "SUSE Bug 1050708 for CVE-2017-2837", url: "https://bugzilla.suse.com/1050708", }, { category: "external", summary: "SUSE Bug 1053919 for CVE-2017-2837", url: "https://bugzilla.suse.com/1053919", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-2837", }, { cve: "CVE-2017-2838", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-2838", }, ], notes: [ { category: "general", text: "An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-2838", url: "https://www.suse.com/security/cve/CVE-2017-2838", }, { category: "external", summary: "SUSE Bug 1050708 for CVE-2017-2838", url: "https://bugzilla.suse.com/1050708", }, { category: "external", summary: "SUSE Bug 1053919 for CVE-2017-2838", url: "https://bugzilla.suse.com/1053919", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-2838", }, { cve: "CVE-2017-2839", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-2839", }, ], notes: [ { category: "general", text: "An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-2839", url: "https://www.suse.com/security/cve/CVE-2017-2839", }, { category: "external", summary: "SUSE Bug 1050711 for CVE-2017-2839", url: "https://bugzilla.suse.com/1050711", }, { category: "external", summary: "SUSE Bug 1053919 for CVE-2017-2839", url: "https://bugzilla.suse.com/1053919", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-2839", }, { cve: "CVE-2018-0886", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-0886", }, ], notes: [ { category: "general", text: "The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how CredSSP validates request during the authentication process, aka \"CredSSP Remote Code Execution Vulnerability\".", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-0886", url: "https://www.suse.com/security/cve/CVE-2018-0886", }, { category: "external", summary: "SUSE Bug 1085416 for CVE-2018-0886", url: "https://bugzilla.suse.com/1085416", }, { category: "external", summary: "SUSE Bug 1087240 for CVE-2018-0886", url: "https://bugzilla.suse.com/1087240", }, { category: "external", summary: "SUSE Bug 1117963 for CVE-2018-0886", url: "https://bugzilla.suse.com/1117963", }, { category: "external", summary: "SUSE Bug 1131873 for CVE-2018-0886", url: "https://bugzilla.suse.com/1131873", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2018-0886", }, { cve: "CVE-2018-1000852", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-1000852", }, ], notes: [ { category: "general", text: "FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvc_main.c, drdynvc_process_capability_request that can result in The RDP server can read the client's memory.. This attack appear to be exploitable via RDPClient must connect the rdp server with echo option. This vulnerability appears to have been fixed in after commit 205c612820dac644d665b5bb1cdf437dc5ca01e3.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-1000852", url: "https://www.suse.com/security/cve/CVE-2018-1000852", }, { category: "external", summary: "SUSE Bug 1117963 for CVE-2018-1000852", url: "https://bugzilla.suse.com/1117963", }, { category: "external", summary: "SUSE Bug 1120507 for CVE-2018-1000852", url: "https://bugzilla.suse.com/1120507", }, { category: "external", summary: "SUSE Bug 1131873 for CVE-2018-1000852", url: "https://bugzilla.suse.com/1131873", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-1000852", }, { cve: "CVE-2018-8784", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-8784", }, ], notes: [ { category: "general", text: "FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress_segment() that results in a memory corruption and probably even a remote code execution.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-8784", url: "https://www.suse.com/security/cve/CVE-2018-8784", }, { category: "external", summary: "SUSE Bug 1116708 for CVE-2018-8784", url: "https://bugzilla.suse.com/1116708", }, { category: "external", summary: "SUSE Bug 1117963 for CVE-2018-8784", url: "https://bugzilla.suse.com/1117963", }, { category: "external", summary: "SUSE Bug 1131873 for CVE-2018-8784", url: "https://bugzilla.suse.com/1131873", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2018-8784", }, { cve: "CVE-2018-8785", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-8785", }, ], notes: [ { category: "general", text: "FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress() that results in a memory corruption and probably even a remote code execution.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-8785", url: "https://www.suse.com/security/cve/CVE-2018-8785", }, { category: "external", summary: "SUSE Bug 1117963 for CVE-2018-8785", url: "https://bugzilla.suse.com/1117963", }, { category: "external", summary: "SUSE Bug 1117967 for CVE-2018-8785", url: "https://bugzilla.suse.com/1117967", }, { category: "external", summary: "SUSE Bug 1131873 for CVE-2018-8785", url: "https://bugzilla.suse.com/1131873", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2018-8785", }, { cve: "CVE-2018-8786", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-8786", }, ], notes: [ { category: "general", text: "FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function update_read_bitmap_update() and results in a memory corruption and probably even a remote code execution.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-8786", url: "https://www.suse.com/security/cve/CVE-2018-8786", }, { category: "external", summary: "SUSE Bug 1116708 for CVE-2018-8786", url: "https://bugzilla.suse.com/1116708", }, { category: "external", summary: "SUSE Bug 1117963 for CVE-2018-8786", url: "https://bugzilla.suse.com/1117963", }, { category: "external", summary: "SUSE Bug 1117966 for CVE-2018-8786", url: "https://bugzilla.suse.com/1117966", }, { category: "external", summary: "SUSE Bug 1131873 for CVE-2018-8786", url: "https://bugzilla.suse.com/1131873", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2018-8786", }, { cve: "CVE-2018-8787", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-8787", }, ], notes: [ { category: "general", text: "FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and results in a memory corruption and probably even a remote code execution.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-8787", url: "https://www.suse.com/security/cve/CVE-2018-8787", }, { category: "external", summary: "SUSE Bug 1116708 for CVE-2018-8787", url: "https://bugzilla.suse.com/1116708", }, { category: "external", summary: "SUSE Bug 1117963 for CVE-2018-8787", url: "https://bugzilla.suse.com/1117963", }, { category: "external", summary: "SUSE Bug 1117964 for CVE-2018-8787", url: "https://bugzilla.suse.com/1117964", }, { category: "external", summary: "SUSE Bug 1131873 for CVE-2018-8787", url: "https://bugzilla.suse.com/1131873", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2018-8787", }, { cve: "CVE-2018-8788", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-8788", }, ], notes: [ { category: "general", text: "FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nsc_rle_decode() that results in a memory corruption and possibly even a remote code execution.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-8788", url: "https://www.suse.com/security/cve/CVE-2018-8788", }, { category: "external", summary: "SUSE Bug 1116708 for CVE-2018-8788", url: "https://bugzilla.suse.com/1116708", }, { category: "external", summary: "SUSE Bug 1117963 for CVE-2018-8788", url: "https://bugzilla.suse.com/1117963", }, { category: "external", summary: "SUSE Bug 1131873 for CVE-2018-8788", url: "https://bugzilla.suse.com/1131873", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2018-8788", }, { cve: "CVE-2018-8789", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-8789", }, ], notes: [ { category: "general", text: "FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service (segfault).", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-8789", url: "https://www.suse.com/security/cve/CVE-2018-8789", }, { category: "external", summary: "SUSE Bug 1117963 for CVE-2018-8789", url: "https://bugzilla.suse.com/1117963", }, { category: "external", summary: "SUSE Bug 1117965 for CVE-2018-8789", url: "https://bugzilla.suse.com/1117965", }, { category: "external", summary: "SUSE Bug 1131873 for CVE-2018-8789", url: "https://bugzilla.suse.com/1131873", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-8789", }, { cve: "CVE-2019-17177", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2019-17177", }, ], notes: [ { category: "general", text: "libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied realloc pointer (i.e., the first argument to realloc) is also used for a realloc return value.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2019-17177", url: "https://www.suse.com/security/cve/CVE-2019-17177", }, { category: "external", summary: "SUSE Bug 1153163 for CVE-2019-17177", url: "https://bugzilla.suse.com/1153163", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2019-17177", }, { cve: "CVE-2020-11017", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-11017", }, ], notes: [ { category: "general", text: "In FreeRDP less than or equal to 2.0.0, by providing manipulated input a malicious client can create a double free condition and crash the server. This is fixed in version 2.1.0.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-11017", url: "https://www.suse.com/security/cve/CVE-2020-11017", }, { category: "external", summary: "SUSE Bug 1171441 for CVE-2020-11017", url: "https://bugzilla.suse.com/1171441", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-11017", }, { cve: "CVE-2020-11018", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-11018", }, ], notes: [ { category: "general", text: "In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. This has been fixed in 2.1.0.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-11018", url: "https://www.suse.com/security/cve/CVE-2020-11018", }, { category: "external", summary: "SUSE Bug 1171441 for CVE-2020-11018", url: "https://bugzilla.suse.com/1171441", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2020-11018", }, { cve: "CVE-2020-11019", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-11019", }, ], notes: [ { category: "general", text: "In FreeRDP less than or equal to 2.0.0, when running with logger set to \"WLOG_TRACE\", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as string to local terminal. This has been fixed in 2.1.0.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-11019", url: "https://www.suse.com/security/cve/CVE-2020-11019", }, { category: "external", summary: "SUSE Bug 1171441 for CVE-2020-11019", url: "https://bugzilla.suse.com/1171441", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2020-11019", }, { cve: "CVE-2020-11038", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-11038", }, ], notes: [ { category: "general", text: "In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a manipulated server can instruct the client to allocate a buffer with a smaller size than requested due to an integer overflow in size calculation. With later messages, the server can manipulate the client to write data out of bound to the previously allocated buffer. This has been patched in 2.1.0.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-11038", url: "https://www.suse.com/security/cve/CVE-2020-11038", }, { category: "external", summary: "SUSE Bug 1171441 for CVE-2020-11038", url: "https://bugzilla.suse.com/1171441", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2020-11038", }, { cve: "CVE-2020-11039", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-11039", }, ], notes: [ { category: "general", text: "In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled (nearly) arbitrary memory can be read and written due to integer overflows in length checks. This has been patched in 2.1.0.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-11039", url: "https://www.suse.com/security/cve/CVE-2020-11039", }, { category: "external", summary: "SUSE Bug 1171441 for CVE-2020-11039", url: "https://bugzilla.suse.com/1171441", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2020-11039", }, { cve: "CVE-2020-11040", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-11040", }, ], notes: [ { category: "general", text: "In FreeRDP less than or equal to 2.0.0, there is an out-of-bound data read from memory in clear_decompress_subcode_rlex, visualized on screen as color. This has been patched in 2.1.0.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-11040", url: "https://www.suse.com/security/cve/CVE-2020-11040", }, { category: "external", summary: "SUSE Bug 1171441 for CVE-2020-11040", url: "https://bugzilla.suse.com/1171441", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 2.2, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2020-11040", }, { cve: "CVE-2020-11041", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-11041", }, ], notes: [ { category: "general", text: "In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend (alsa, oss, pulse, ...). The most likely outcome is a crash of the client instance followed by no or distorted sound or a session disconnect. If a user cannot upgrade to the patched version, a workaround is to disable sound for the session. This has been patched in 2.1.0.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-11041", url: "https://www.suse.com/security/cve/CVE-2020-11041", }, { category: "external", summary: "SUSE Bug 1171441 for CVE-2020-11041", url: "https://bugzilla.suse.com/1171441", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 2.2, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2020-11041", }, { cve: "CVE-2020-11043", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-11043", }, ], notes: [ { category: "general", text: "In FreeRDP less than or equal to 2.0.0, there is an out-of-bounds read in rfx_process_message_tileset. Invalid data fed to RFX decoder results in garbage on screen (as colors). This has been patched in 2.1.0.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-11043", url: "https://www.suse.com/security/cve/CVE-2020-11043", }, { category: "external", summary: "SUSE Bug 1171441 for CVE-2020-11043", url: "https://bugzilla.suse.com/1171441", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 2.2, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2020-11043", }, { cve: "CVE-2020-11095", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-11095", }, ], notes: [ { category: "general", text: "In FreeRDP before version 2.1.2, an out of bound reads occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-11095", url: "https://www.suse.com/security/cve/CVE-2020-11095", }, { category: "external", summary: "SUSE Bug 1173247 for CVE-2020-11095", url: "https://bugzilla.suse.com/1173247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.4, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-11095", }, { cve: "CVE-2020-11096", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-11096", }, ], notes: [ { category: "general", text: "In FreeRDP before version 2.1.2, there is a global OOB read in update_read_cache_bitmap_v3_order. As a workaround, one can disable bitmap cache with -bitmap-cache (default). This is fixed in version 2.1.2.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-11096", url: "https://www.suse.com/security/cve/CVE-2020-11096", }, { category: "external", summary: "SUSE Bug 1173247 for CVE-2020-11096", url: "https://bugzilla.suse.com/1173247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-11096", }, { cve: "CVE-2020-11097", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-11097", }, ], notes: [ { category: "general", text: "In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-11097", url: "https://www.suse.com/security/cve/CVE-2020-11097", }, { category: "external", summary: "SUSE Bug 1173247 for CVE-2020-11097", url: "https://bugzilla.suse.com/1173247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.4, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-11097", }, { cve: "CVE-2020-11098", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-11098", }, ], notes: [ { category: "general", text: "In FreeRDP before version 2.1.2, there is an out-of-bound read in glyph_cache_put. This affects all FreeRDP clients with `+glyph-cache` option enabled This is fixed in version 2.1.2.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-11098", url: "https://www.suse.com/security/cve/CVE-2020-11098", }, { category: "external", summary: "SUSE Bug 1173247 for CVE-2020-11098", url: "https://bugzilla.suse.com/1173247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-11098", }, { cve: "CVE-2020-11099", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-11099", }, ], notes: [ { category: "general", text: "In FreeRDP before version 2.1.2, there is an out of bounds read in license_read_new_or_upgrade_license_packet. A manipulated license packet can lead to out of bound reads to an internal buffer. This is fixed in version 2.1.2.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-11099", url: "https://www.suse.com/security/cve/CVE-2020-11099", }, { category: "external", summary: "SUSE Bug 1173247 for CVE-2020-11099", url: "https://bugzilla.suse.com/1173247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-11099", }, { cve: "CVE-2020-11521", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-11521", }, ], notes: [ { category: "general", text: "libfreerdp/codec/planar.c in FreeRDP version > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-11521", url: "https://www.suse.com/security/cve/CVE-2020-11521", }, { category: "external", summary: "SUSE Bug 1169413 for CVE-2020-11521", url: "https://bugzilla.suse.com/1169413", }, { category: "external", summary: "SUSE Bug 1171443 for CVE-2020-11521", url: "https://bugzilla.suse.com/1171443", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.6, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-11521", }, { cve: "CVE-2020-11522", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-11522", }, ], notes: [ { category: "general", text: "libfreerdp/gdi/gdi.c in FreeRDP > 1.0 through 2.0.0-rc4 has an Out-of-bounds Read.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-11522", url: "https://www.suse.com/security/cve/CVE-2020-11522", }, { category: "external", summary: "SUSE Bug 1169413 for CVE-2020-11522", url: "https://bugzilla.suse.com/1169413", }, { category: "external", summary: "SUSE Bug 1171444 for CVE-2020-11522", url: "https://bugzilla.suse.com/1171444", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-11522", }, { cve: "CVE-2020-11523", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-11523", }, ], notes: [ { category: "general", text: "libfreerdp/gdi/region.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Integer Overflow.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-11523", url: "https://www.suse.com/security/cve/CVE-2020-11523", }, { category: "external", summary: "SUSE Bug 1169413 for CVE-2020-11523", url: "https://bugzilla.suse.com/1169413", }, { category: "external", summary: "SUSE Bug 1171445 for CVE-2020-11523", url: "https://bugzilla.suse.com/1171445", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.6, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-11523", }, { cve: "CVE-2020-11524", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-11524", }, ], notes: [ { category: "general", text: "libfreerdp/codec/interleaved.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-11524", url: "https://www.suse.com/security/cve/CVE-2020-11524", }, { category: "external", summary: "SUSE Bug 1169413 for CVE-2020-11524", url: "https://bugzilla.suse.com/1169413", }, { category: "external", summary: "SUSE Bug 1171446 for CVE-2020-11524", url: "https://bugzilla.suse.com/1171446", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.6, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-11524", }, { cve: "CVE-2020-11525", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-11525", }, ], notes: [ { category: "general", text: "libfreerdp/cache/bitmap.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out of bounds read.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-11525", url: "https://www.suse.com/security/cve/CVE-2020-11525", }, { category: "external", summary: "SUSE Bug 1169413 for CVE-2020-11525", url: "https://bugzilla.suse.com/1169413", }, { category: "external", summary: "SUSE Bug 1171447 for CVE-2020-11525", url: "https://bugzilla.suse.com/1171447", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 2.2, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "low", }, ], title: "CVE-2020-11525", }, { cve: "CVE-2020-11526", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-11526", }, ], notes: [ { category: "general", text: "libfreerdp/core/update.c in FreeRDP versions > 1.1 through 2.0.0-rc4 has an Out-of-bounds Read.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-11526", url: "https://www.suse.com/security/cve/CVE-2020-11526", }, { category: "external", summary: "SUSE Bug 1169413 for CVE-2020-11526", url: "https://bugzilla.suse.com/1169413", }, { category: "external", summary: "SUSE Bug 1171674 for CVE-2020-11526", url: "https://bugzilla.suse.com/1171674", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 2.2, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "low", }, ], title: "CVE-2020-11526", }, { cve: "CVE-2020-13396", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-13396", }, ], notes: [ { category: "general", text: "An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-13396", url: "https://www.suse.com/security/cve/CVE-2020-13396", }, { category: "external", summary: "SUSE Bug 1171441 for CVE-2020-13396", url: "https://bugzilla.suse.com/1171441", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.1, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2020-13396", }, { cve: "CVE-2020-13397", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-13397", }, ], notes: [ { category: "general", text: "An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in security_fips_decrypt in libfreerdp/core/security.c due to an uninitialized value.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-13397", url: "https://www.suse.com/security/cve/CVE-2020-13397", }, { category: "external", summary: "SUSE Bug 1171441 for CVE-2020-13397", url: "https://bugzilla.suse.com/1171441", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2020-13397", }, { cve: "CVE-2020-13398", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-13398", }, ], notes: [ { category: "general", text: "An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) write vulnerability has been detected in crypto_rsa_common in libfreerdp/crypto/crypto.c.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-13398", url: "https://www.suse.com/security/cve/CVE-2020-13398", }, { category: "external", summary: "SUSE Bug 1171441 for CVE-2020-13398", url: "https://bugzilla.suse.com/1171441", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.3, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2020-13398", }, { cve: "CVE-2020-15103", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-15103", }, ], notes: [ { category: "general", text: "In FreeRDP less than or equal to 2.1.2, an integer overflow exists due to missing input sanitation in rdpegfx channel. All FreeRDP clients are affected. The input rectangles from the server are not checked against local surface coordinates and blindly accepted. A malicious server can send data that will crash the client later on (invalid length arguments to a `memcpy`) This has been fixed in 2.2.0. As a workaround, stop using command line arguments /gfx, /gfx-h264 and /network:auto", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-15103", url: "https://www.suse.com/security/cve/CVE-2020-15103", }, { category: "external", summary: "SUSE Bug 1174321 for CVE-2020-15103", url: "https://bugzilla.suse.com/1174321", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2020-15103", }, { cve: "CVE-2020-4030", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-4030", }, ], notes: [ { category: "general", text: "In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks due to an integer overflow. This is fixed in version 2.1.2.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-4030", url: "https://www.suse.com/security/cve/CVE-2020-4030", }, { category: "external", summary: "SUSE Bug 1173247 for CVE-2020-4030", url: "https://bugzilla.suse.com/1173247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-4030", }, { cve: "CVE-2020-4031", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-4031", }, ], notes: [ { category: "general", text: "In FreeRDP before version 2.1.2, there is a use-after-free in gdi_SelectObject. All FreeRDP clients using compatibility mode with /relax-order-checks are affected. This is fixed in version 2.1.2.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-4031", url: "https://www.suse.com/security/cve/CVE-2020-4031", }, { category: "external", summary: "SUSE Bug 1173247 for CVE-2020-4031", url: "https://bugzilla.suse.com/1173247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-4031", }, { cve: "CVE-2020-4032", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-4032", }, ], notes: [ { category: "general", text: "In FreeRDP before version 2.1.2, there is an integer casting vulnerability in update_recv_secondary_order. All clients with +glyph-cache /relax-order-checks are affected. This is fixed in version 2.1.2.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-4032", url: "https://www.suse.com/security/cve/CVE-2020-4032", }, { category: "external", summary: "SUSE Bug 1173247 for CVE-2020-4032", url: "https://bugzilla.suse.com/1173247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-4032", }, { cve: "CVE-2020-4033", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-4033", }, ], notes: [ { category: "general", text: "In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS. All FreeRDP based clients with sessions with color depth < 32 are affected. This is fixed in version 2.1.2.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-4033", url: "https://www.suse.com/security/cve/CVE-2020-4033", }, { category: "external", summary: "SUSE Bug 1173247 for CVE-2020-4033", url: "https://bugzilla.suse.com/1173247", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:freerdp-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-server-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.s390x", "openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.s390x", "openSUSE Tumbleweed:libwinpr2-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1.x86_64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.aarch64", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.ppc64le", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.s390x", "openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-4033", }, ], }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
Title of the comment
Description of the comment
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.