ALAS2-2019-1191: CVEs fixed (Amazon Linux)
ALAS2-2019-1191 fixes 3 tracked CVEs. Affected systems and fixed versions.
- CVE-2018-8788 CRITICAL 9.8 UPGRADE MITIGATE FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nsc_rle_decode
- CVE-2018-8787 CRITICAL 9.8 UPGRADE MITIGATE FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in
- CVE-2018-8786 CRITICAL 9.8 UPGRADE MITIGATE FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow i
Applies to
- Amazon Linux 2