CVE catalog

CVE-2017-2835

freerdp - security update

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.43% · Oct 25, 2026

An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle to trigger this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntufreerdp14.041.0.2-1ubuntu1vulnerable
Ubuntufreerdp14.041.0.2-2ubuntu1vulnerable
Ubuntufreerdp14.041.0.2-2ubuntu1.1fixed
Ubuntufreerdp16.041.1.0~git20140921.1.440916e+dfsg1-5ubuntu1vulnerable
Ubuntufreerdp16.041.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2fixed
Debianfreerdp71.0.1-1.1+deb7u2vulnerable
Debianfreerdp71.0.1-1.1+deb7u3vulnerable
Debianfreerdp71.0.1-1.1+deb7u4fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntufreerdpdeb14.041.0.2-2ubuntu1.1Not reportedUBUNTU-CVE-2017-2835Not reported
Ubuntufreerdpdeb16.041.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2Not reportedUBUNTU-CVE-2017-2835Not reported
Debianfreerdpdeb71.0.1-1.1+deb7u4Not reportedDLA-1095-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]