medium5.9
CVE-2017-2836
An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11.
Impact
An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freerdp | Freerdp | Version 2.0.0 |
| Debian | Debian Linux | Versions 8.0, 9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/99942
- https://www.debian.org/security/2017/dsa-3923
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0338
- http://www.securityfocus.com/bid/99942
- https://www.debian.org/security/2017/dsa-3923
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0338