An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.
The product does not validate, or incorrectly validates, a certificate.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Freerdp | Freerdp | 2.0.0-beta1 (including) | 2.0.0-beta1 (including) |
| Freerdp | Ubuntu | devel | * |
| Freerdp | Ubuntu | trusty | * |
| Freerdp | Ubuntu | upstream | * |
| Freerdp | Ubuntu | xenial | * |
| Freerdp | Ubuntu | zesty | * |