The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2116:01 advisory.

    * freerdp: out of bounds read in TrioParse (CVE-2020-4030)
      * freerdp: out of bound reads resulting in accessing memory location outside of static array     PRIMARY_DRAWING_ORDER_FIELD_BYTES (CVE-2020-11095)
      * freerdp: out of bounds read in PRIMARY_DRAWING_ORDER_FIELD_BYTES (CVE-2020-11097)
      * freerdp: out of bounds read in license_read_new_or_upgrade_license_packet (CVE-2020-11099)
      * freerdp: integer overflow due to missing input sanitation in rdpegfx channel (CVE-2020-15103)
      * freerdp: out-of-bounds read in RLEDECOMPRESS (CVE-2020-4033)
      * freerdp: out-of-bound read in update_read_cache_bitmap_v3_order (CVE-2020-11096)
      * freerdp: out-of-bound read in glyph_cache_put (CVE-2020-11098)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
293997	MiracleLinux 8 : freerdp-2.2.0-1.el8 (AXSA:2021-2116:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium
182754	Debian dla-3606 : freerdp2-dev - security update	Nessus	Debian Local Security Checks	2023/10/8	2025/1/22	critical

偵測

搜尋 Plugin

medium

critical