USN-3845-2

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-3845-2

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3845-2.json

JSON Data

https://api.test.osv.dev/v1/vulns/USN-3845-2

Related

Published

2019-05-28T15:34:12.854534Z

Modified

2019-05-28T15:34:12.854534Z

Summary

freerdp vulnerabilities

Details

USN-3845-1 fixed several vulnerabilities in FreeRDP. This update provides the corresponding update for Ubuntu 18.04 LTS and Ubuntu 18.10.

Original advisory details:

Eyal Itkin discovered FreeRDP incorrectly handled certain stream encodings. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only applies to Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-8784, CVE-2018-8785)

Eyal Itkin discovered FreeRDP incorrectly handled bitmaps. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2018-8786, CVE-2018-8787)

Eyal Itkin discovered FreeRDP incorrectly handled certain stream encodings. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only applies to Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-8788)

Eyal Itkin discovered FreeRDP incorrectly handled NTLM authentication. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only applies to Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-8789)

References

Affected packages

Ubuntu:18.04:LTS / freerdp

Package

Name: freerdp
Purl: pkg:deb/ubuntu/freerdp?arch=src?distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1

Affected versions

1.*

1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "freerdp-x11"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "freerdp-x11-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-cache1.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-cache1.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-client1.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-client1.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-codec1.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-codec1.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-common1.1.0"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-common1.1.0-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-core1.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-core1.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-crypto1.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-crypto1.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-dev"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-gdi1.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-gdi1.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-locale1.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-locale1.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-plugins-standard"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-plugins-standard-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-primitives1.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-primitives1.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-rail1.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-rail1.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-utils1.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libfreerdp-utils1.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-asn1-0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-asn1-0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-bcrypt0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-bcrypt0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-credentials0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-credentials0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-credui0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-credui0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-crt0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-crt0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-crypto0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-crypto0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-dev"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-dsparse0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-dsparse0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-environment0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-environment0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-error0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-error0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-file0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-file0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-handle0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-handle0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-heap0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-heap0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-input0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-input0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-interlocked0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-interlocked0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-io0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-io0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-library0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-library0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-path0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-path0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-pipe0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-pipe0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-pool0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-pool0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-registry0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-registry0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-rpc0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-rpc0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-sspi0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-sspi0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-sspicli0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-sspicli0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-synch0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-synch0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-sysinfo0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-sysinfo0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-thread0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-thread0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-timezone0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-timezone0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-utils0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-utils0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-winhttp0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-winhttp0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-winsock0.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libwinpr-winsock0.1-dbgsym"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libxfreerdp-client1.1"
        },
        {
            "binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
            "binary_name": "libxfreerdp-client1.1-dbgsym"
        }
    ]
}