RHSA-2019:0697: CVEs fixed (Red Hat)
RHSA-2019:0697 fixes 3 tracked CVEs. Affected systems and fixed versions.
- CVE-2018-8788 CRITICAL 9.8 UPGRADE MITIGATE FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nsc_rle_decode
- CVE-2018-8787 CRITICAL 9.8 UPGRADE MITIGATE FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in
- CVE-2018-8786 CRITICAL 9.8 UPGRADE MITIGATE FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow i
Applies to
- RHEL 7 · fixed in freerdp-1.0.2-15.el7_6.1