CESA-2021:4619 -- centos 7 freerdp,libwinprID: oval:org.secpod.oval:def:205905 | Date: (C)2021-11-23 (M)2023-11-23 |
Class: PATCH | Family: unix |
FreeRDP is a free implementation of the Remote Desktop Protocol , released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix: * freerdp: improper client input validation for gateway connections allows to overwrite memory * freerdp: improper region checks in all clients allow out of bound write to memory For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.