CVE-2019-17177

Published: Oct 4, 2019Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied realloc pointer (i.e., the first argument to realloc) is also used for a realloc return value.

Affected (11)

Products: Freerdp: Freerdp · Opensuse: Leap

1 product

1 product

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Freerdp Freerdp	Up to 1.0.2
Freerdp Freerdp	Version 1.1.0 beta1
Freerdp Freerdp	Version 1.1.0 beta
Freerdp Freerdp	Version 2.0.0 beta1
Freerdp Freerdp	Version 2.0.0 rc0
Freerdp Freerdp	Version 2.0.0 rc1
Freerdp Freerdp	Version 2.0.0 rc2
Freerdp Freerdp	Version 2.0.0 rc3
Freerdp Freerdp	Version 2.0.0 rc4

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 15.0
Opensuse Leap	Version 15.1

Related CWEs

Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (12)

http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00004.html

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00005.html

Source: cve@mitre.org

Third Party Advisory

https://github.com/FreeRDP/FreeRDP/commit/9fee4ae076b1ec97b97efb79ece08d1dab4df29a

Source: cve@mitre.org

PatchVendor Advisory

https://github.com/FreeRDP/FreeRDP/issues/5645

Source: cve@mitre.org

Third Party Advisory

https://security.gentoo.org/glsa/202005-07

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/4379-1/

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://github.com/FreeRDP/FreeRDP/commit/9fee4ae076b1ec97b97efb79ece08d1dab4df29a

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://github.com/FreeRDP/FreeRDP/issues/5645

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://security.gentoo.org/glsa/202005-07

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://usn.ubuntu.com/4379-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.