freerdp-1.0.2-7.AXS4

エラータID: AXSA:2020-112:03

Release date: 
Thursday, June 4, 2020 - 20:46
Subject: 
freerdp-1.0.2-7.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

* freerdp: Out-of-bounds write in crypto_rsa_common in libfreerdp/crypto/crypto.c (CVE-2020-13398)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2020-13398
An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) write vulnerability has been detected in crypto_rsa_common in libfreerdp/crypto/crypto.c.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. freerdp-1.0.2-7.AXS4.src.rpm
    MD5: b18a1c7eeac0773a3e0bd08e3f35ad8d
    SHA-256: 734b1998ef484fa5f35e06e103fc1986a44e03bd227602aaa2f9632228a34114
    Size: 3.36 MB

Asianux Server 4 for x86
  1. freerdp-1.0.2-7.AXS4.i686.rpm
    MD5: 499519e747bb2b112edfbf28ef80aaa9
    SHA-256: f2957670cea8bad061dea8f4ba1065fb7e47edcd5f2f74cfab704f4c692ace3d
    Size: 53.14 kB
  2. freerdp-libs-1.0.2-7.AXS4.i686.rpm
    MD5: c0a15c92f889c9b3a4e5231abacb3b65
    SHA-256: efccf1d145fab62e994e0e44c2e894db539f05af17b8cb001cbd0176541e6952
    Size: 213.91 kB
  3. freerdp-plugins-1.0.2-7.AXS4.i686.rpm
    MD5: 37e82fd228c40ae1bc47db4dc1db5639
    SHA-256: 06508ea8b409459f0148b4f3db42c9844cabf9892d23cfc7ffe100d4a2496f6a
    Size: 76.59 kB

Asianux Server 4 for x86_64
  1. freerdp-1.0.2-7.AXS4.x86_64.rpm
    MD5: 08797fc30e144eb0003cddacff928aff
    SHA-256: ae0bf8901e2c81157440715aef4fac539c6c236e0d1bb0d896b5d84a995dc562
    Size: 54.00 kB
  2. freerdp-libs-1.0.2-7.AXS4.x86_64.rpm
    MD5: f66ed6abff44868bf209990d2ec3b38d
    SHA-256: 90e5c31c05a90385846b94c02433051a3dca7000422b9d2eb909b03b33b7c6be
    Size: 207.59 kB
  3. freerdp-plugins-1.0.2-7.AXS4.x86_64.rpm
    MD5: 0f4342a3873c9be56ddcee6f29c519f5
    SHA-256: 66e7beafb5bc541533dabe73aa71f7f1bae0bce1a08914bfeec98e828a7a0c55
    Size: 75.37 kB