MGASA-2022-0474

Source
https://advisories.mageia.org/MGASA-2022-0474.html
Import Source
https://advisories.mageia.org/MGASA-2022-0474.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2022-0474
Related
Published
2022-12-17T18:48:08Z
Modified
2022-12-17T17:49:53Z
Summary
Updated freerdp packages fix security vulnerability
Details

Affected versions of FreeRDP are missing input length validation in 'drive' channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. (CVE-2022-41877)

References
Credits

Affected packages