CVE-2018-8789

Publication date 29 November 2018

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Cvss 3 Severity Score

7.5 · High

Score breakdown

FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service (segfault).

Status

Package Ubuntu Release Status
freerdp 19.04 disco Not in release
18.10 cosmic
Fixed 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.10.1
18.04 LTS bionic
Fixed 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1
16.04 LTS xenial
Fixed 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.3
14.04 LTS trusty Not in release
freerdp2 19.04 disco
Fixed 2.0.0~git20181120.1.e21b72c95+dfsg1-1
18.10 cosmic
Fixed 2.0.0~git20180411.1.7a7b1802+dfsg1-2ubuntu0.1
18.04 LTS bionic
Fixed 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1
16.04 LTS xenial Not in release
14.04 LTS trusty Not in release

Severity score breakdown

Parameter Value
Base score 7.5 · High
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Scope Unchanged
Confidentiality None
Integrity impact None
Availability impact High
Vector CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

Related Ubuntu Security Notices (USN)

    • USN-3845-1
    • FreeRDP vulnerabilities
    • 12 December 2018

Other references