CVE-2017-2836 PUBLISHED

An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.

EPSS 0.30% · 52.8th percentile

Risk Scores

EPSS Score
0.30%
52.8th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSfreerdp0, 1.0.2-1ubuntu1, 1.0.2-2ubuntu1
Ubuntu:16.04:LTSfreerdp0, 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1

Timeline

References

Open in Interactive Console →