Description
In FreeRDP after 1.0 and before 2.0.0, there is a stream out-of-bounds seek in update_read_synchronize that could lead to a later out-of-bounds read.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
FreeRDP FreeRDP
> 1.0, < 2.0.0affected
References
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hx48-wmmm-mr5q ↗
- https://github.com/FreeRDP/FreeRDP/issues/6006 ↗
- https://github.com/FreeRDP/FreeRDP/commit/ed53cd148f43cbab905eaa0f5308c2bf3c48cc37 ↗
- https://usn.ubuntu.com/4379-1/ ↗
- https://usn.ubuntu.com/4382-1/ ↗
- https://lists.debian.org/debian-lts-announce/2020/08/msg00054.html ↗
- https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html ↗