GCVE - cpe:2.3:a:freerdp:freerdp:2.0.0:beta1:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:freerdp:freerdp:2.0.0:beta1:*:*:*:*:*:*

part: a version: 2.0.0 update: beta1

Vendor	Freerdp (`cfeb94e5-95a8-5e78-a94b-4a8e156315c8`)
Product	Freerdp (`5f69cb6c-ded4-5a57-acbc-ebffc4e24284`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/freerdp2-dev`	purl2cpe	2026-06-01 10:14:39.066290
`pkg:deb/ubuntu/freerdp2-dev`	purl2cpe	2026-06-01 10:14:39.066291
`pkg:github/freerdp/freerdp`	purl2cpe	2026-06-01 10:14:39.066293
`pkg:gitlab/kalilinux/freerdp`	purl2cpe	2026-06-01 10:14:39.066294
`pkg:nugget/FreeRDP`	purl2cpe	2026-06-01 10:14:39.066295
`pkg:rpm/fedora/freerdp`	purl2cpe	2026-06-01 10:14:39.066297
`pkg:rpm/opensuse/freerdp`	purl2cpe	2026-06-01 10:14:39.066298
`pkg:sourceforge/freerdp`	purl2cpe	2026-06-01 10:14:39.066299

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-17177`	vulnerable	2026-06-08 05:13:10.059407	Details available libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied realloc pointer (i.e., the first argument to realloc) is also used for a realloc return value. Published: 2019-10-04T16:57:40.000Z Updated: 2024-08-05T01:33:17.280Z Open on db.gcve.eu Reference links https://github.com/FreeRDP/FreeRDP/issues/5645 http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00004.html http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00005.html https://security.gentoo.org/glsa/202005-07 https://usn.ubuntu.com/4379-1/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2839`	vulnerable	2026-06-08 05:09:26.058888	Details available MEDIUM (6.5) An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability. Published: 2018-04-24T19:00:00.000Z Updated: 2024-09-16T23:10:49.379Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/99942 https://www.debian.org/security/2017/dsa-3923 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0341	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2838`	vulnerable	2026-06-08 05:09:26.058496	Details available MEDIUM (6.5) An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability. Published: 2018-04-24T19:00:00.000Z Updated: 2024-09-17T03:13:28.026Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/99942 https://www.debian.org/security/2017/dsa-3923 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0340	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2837`	vulnerable	2026-06-08 05:09:26.058097	Details available MEDIUM (6.5) An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability. Published: 2018-04-24T19:00:00.000Z Updated: 2024-09-16T22:10:32.193Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/99942 https://www.debian.org/security/2017/dsa-3923 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0339	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2836`	vulnerable	2026-06-08 05:09:26.057702	Details available MEDIUM (6.5) An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability. Published: 2018-04-24T19:00:00.000Z Updated: 2024-09-17T00:57:07.472Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/99942 https://www.debian.org/security/2017/dsa-3923 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0338	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2835`	vulnerable	2026-06-08 05:09:26.057268	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2834`	vulnerable	2026-06-08 05:09:26.056688	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

FreeRDP 2.0.0 Beta 1

Notes

PURL mappings

Vulnerability references

Contribute