Vulnerability Details CVE-2017-2834
An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle attack to trigger this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 78.2%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.8
References
- http://www.securityfocus.com/bid/99942
- https://www.debian.org/security/2017/dsa-3923
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0336
- http://www.securityfocus.com/bid/99942
- https://www.debian.org/security/2017/dsa-3923
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0336
Products affected by CVE-2017-2834
-
cpe:2.3:a:freerdp:freerdp:2.0.0
-
cpe:2.3:o:debian:debian_linux:8.0
-
cpe:2.3:o:debian:debian_linux:9.0