Test ID:	1.3.6.1.4.1.25623.1.1.10.2017.0475
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2017-0475)
Summary:	The remote host is missing an update for the 'freerdp' package(s) announced via the MGASA-2017-0475 advisory.
Description:	Summary: The remote host is missing an update for the 'freerdp' package(s) announced via the MGASA-2017-0475 advisory. Vulnerability Insight: An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle attack to trigger this vulnerability (CVE-2017-2834). An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle to trigger this vulnerability (CVE-2017-2835). An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability (CVE-2017-2836). An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability (CVE-2017-2837). An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability (CVE-2017-2838, CVE-2017-2839). Affected Software/OS: 'freerdp' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-2834 BugTraq ID: 99942 http://www.securityfocus.com/bid/99942 Debian Security Information: DSA-3923 (Google Search) https://www.debian.org/security/2017/dsa-3923 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0336 Common Vulnerability Exposure (CVE) ID: CVE-2017-2835 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0337 Common Vulnerability Exposure (CVE) ID: CVE-2017-2836 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0338 Common Vulnerability Exposure (CVE) ID: CVE-2017-2837 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0339 Common Vulnerability Exposure (CVE) ID: CVE-2017-2838 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0340 Common Vulnerability Exposure (CVE) ID: CVE-2017-2839 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0341
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.