Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Out of bound read in cliprdr_server_receive_capabilities in FreeRDP
Vulnerability Description
In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. This has been fixed in 2.1.0.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
跨界内存读
Vulnerability Title
FreeRDP 缓冲区错误漏洞
Vulnerability Description
FreeRDP是FreeRDP团队的一款开源的远程桌面协议（RDP）的实现。 FreeRDP 2.0.0及之前版本中的cliprdr_server_receive_capabilities存在缓冲区错误漏洞。攻击者可借助恶意客户端利用该漏洞随机分配内存大小，导致资源耗尽。
CVSS Information
N/A
Vulnerability Type
N/A