CVE-2018-1000852

FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvc_main.c, drdynvc_process_capability_request that can result in The RDP server can read the client's memory.. This attack appear to be exploitable via RDPClient must connect the rdp server with echo option. This vulnerability appears to have been fixed in after commit 205c612820dac644d665b5bb1cdf437dc5ca01e3.

• CWE-125

• https://access.redhat.com/errata/RHSA-2019:2157Third Party Advisory
• https://github.com/FreeRDP/FreeRDP/issues/4866Exploit, Third Party Advisory
• https://github.com/FreeRDP/FreeRDP/pull/4871Third Party Advisory
• https://github.com/FreeRDP/FreeRDP/pull/4871/commits/baee520e3dd9be6511c45a14c5f5e77784de1471Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YVJKO2DR5EY4C4QZOP7SNNBEW2JW6FHX/
• https://usn.ubuntu.com/4379-1/Third Party Advisory
• https://access.redhat.com/errata/RHSA-2019:2157Third Party Advisory
• https://github.com/FreeRDP/FreeRDP/issues/4866Exploit, Third Party Advisory
• https://github.com/FreeRDP/FreeRDP/pull/4871Third Party Advisory
• https://github.com/FreeRDP/FreeRDP/pull/4871/commits/baee520e3dd9be6511c45a14c5f5e77784de1471Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YVJKO2DR5EY4C4QZOP7SNNBEW2JW6FHX/
• https://usn.ubuntu.com/4379-1/Third Party Advisory

Published

Dec 20, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1000846FreshDNS version 1.0.3 and earlier contains a Cross ite Requ…
• CVE-2018-1000847FreshDNS version 1.0.3 and prior contains a Cross Site Scrip…
• CVE-2018-1000848Wampserver version prior to version 3.1.5 contains a Cross S…
• CVE-2018-1000849Alpine Linux version Versions prior to 2.6.10, 2.7.6, and 2.…
• CVE-2018-1000850Square Retrofit version versions from (including) 2.0 and 2.…
• CVE-2018-1000851Copay Bitcoin Wallet version 5.01 to 5.1.0 included. contain…
• CVE-2018-1000853Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-1000854esigate.org esigate version 5.2 and earlier contains a CWE-7…
• CVE-2018-1000855easymon version 1.4 and earlier contains a Cross Site Script…6.1
• CVE-2018-1000856DomainMOD version 4.09.03 and above. Also verified in the la…
• CVE-2018-1000857log-user-session version 0.7 and earlier contains a Director…8.8
• CVE-2018-1000858GnuPG version 2.1.12 - 2.2.11 contains a Cross ite Request F…