Out-of-bounds read in FreeRDP - CVE-2018-8789

Vulnerability identifier: #VU16588

CSH Severity: Low

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-8789

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition.

The vulnerability exists due to several out-of-bound read conditions that exist in the NTLM authentication module. A remote attacker can send a specially crafted request that submits malicious input, trigger several out-of-bounds read conditions that the attacker can use to cause a DoS condition.

FreeRDP
Ubuntu
Opensuse
freerdp (Alpine package)
libfreerdp1 (Ubuntu package)
freerdp (Ubuntu package)
libfreerdp-client1.1 (Ubuntu package)
libfreerdp2-2 (Ubuntu package)
libfreerdp-client2-2 (Ubuntu package)

Update to version 2.0.0-rc4.

FreeRDP - update to 2.0.0 rc4
freerdp (Alpine package) - update to 2.0.0_rc4-r0
libfreerdp1 (Ubuntu package) - update to 1.0.2-2ubuntu1.2
freerdp (Ubuntu package) - addressed in versions 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1, 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.10.1
libfreerdp-client1.1 (Ubuntu package) - update to 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.3
libfreerdp2-2 (Ubuntu package) - addressed in versions 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1, 2.0.0~git20180411.1.7a7b1802+dfsg1-2ubuntu0.1
libfreerdp-client2-2 (Ubuntu package) - addressed in versions 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1, 2.0.0~git20180411.1.7a7b1802+dfsg1-2ubuntu0.1

• https://github.com/FreeRDP/FreeRDP/commit/2ee663f39dc8dac3d9988e847db19b2d7e3ac8c6

• Multiple vulnerabilities in FreeRDP
• OpenSUSE Linux update for freerdp
• OpenSUSE Linux update for freerdp
• Ubuntu update for FreeRDP
• Out-of-bounds read in freerdp (Alpine package)
• Ubuntu update for freerdp, freerdp2