Description
An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.
Metrics
CVSS 3.1 5.9/10
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HAffected software
| Vendor | Product | Versions |
|---|---|---|
| FreeRDP | FreeRDP | 2.0.0-beta1+android11 - Windows, OSX, Linux |
References
- http://www.securityfocus.com/bid/99942Broken Link
- https://www.debian.org/security/2017/dsa-3923Third Party Advisory
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0341Third Party Advisory
- http://www.securityfocus.com/bid/99942Broken Link
- https://www.debian.org/security/2017/dsa-3923Third Party Advisory
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0341Third Party Advisory
Timeline
- Published
- Apr 24, 2018
- Last modified
- Jun 17, 2026
- NVD status
- Modified