CVE-2017-2836
6.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Summary
An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| FreeRDP | FreeRDP | 2.0.0-beta1+android11 - Windows, OSX, Linux | affected |
Weaknesses
- denial of service
ADP Enrichment
CVE Program Container
Additional References
- http://www.securityfocus.com/bid/99942
- https://www.debian.org/security/2017/dsa-3923
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0338
References
- http://www.securityfocus.com/bid/99942
- https://www.debian.org/security/2017/dsa-3923
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0338
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.