Skip to content
OpenAdvisories
Medium ALAS2-2024-2537 9 CVEs

Moderate: freerdp security update (Amazon Linux 2)

Published May 9, 2024 · Updated Jun 6, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-32660: FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.5.1, a malicious server can crash the FreeRDP client by sending invalid huge allocation size. Version 3.5.1 contains a patch for the issue. No known workarounds are available. CVE-2024-32659: FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read if `((nWidth == 0) and (nHeight == 0))`. Version 3.5.1 contains a patch for the issue. No known workarounds are available. CVE-2024-32460: OutOfBound Read in interleaved_decompress NOTE: https://www.freerdp.com/2024/04/17/2_11_6-release CVE-2024-32459: FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients and servers that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. No known workarounds are available. CVE-2024-32458: FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, use `/gfx` or `/rfx` modes (on by default, require server side support). CVE-2024-32041: OutOfBound Read in zgfx_decompress_segment NOTE: https://www.freerdp.com/2024/04/17/2_11_6-release CVE-2024-32040: FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 and have connections to servers using the `NSC` codec are vulnerable to integer underflow. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, do not use the NSC codec (e.g. use `-nsc`). CVE-2024-32039: Integer overflow & OutOfBound Write in clear_decompress_residual_data NOTE: https://www.freerdp.com/2024/04/17/2_11_6-release CVE-2024-22211: FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in `freerdp_bitmap_planar_context_reset` leads to heap-buffer overflow. This affects FreeRDP based clients. FreeRDP based server implementations and proxy are not affected. A malicious server could prepare a `RDPGFX_RESET_GRAPHICS_PDU` to allocate too small buffers, possibly triggering later out of bound read/write. Data extraction over network is not possible, the buffers are used to display an image. This issue has been addressed in version 2.11.5 and 3.2.0. Users are advised to upgrade. there are no know workarounds for this vulnerability.

Fixed packages 6

ReleasePackageFixed in
Amazon Linux · 2 freerdp 2:2.11.7-1.amzn2.0.1
Amazon Linux · 2 freerdp-debuginfo 2:2.11.7-1.amzn2.0.1
Amazon Linux · 2 freerdp-devel 2:2.11.7-1.amzn2.0.1
Amazon Linux · 2 freerdp-libs 2:2.11.7-1.amzn2.0.1
Amazon Linux · 2 libwinpr 2:2.11.7-1.amzn2.0.1
Amazon Linux · 2 libwinpr-devel 2:2.11.7-1.amzn2.0.1

Vulnerabilities 9

  • Critical 9.8
    CVE-2024-32039

    FreeRDP Integer overflow & OutOfBound Write in clear_decompress_residual_data

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients using a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to integer overflow and out-of-bounds write. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, …

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Critical 9.8
    CVE-2024-32041

    FreeRDP OutOfBound Read in zgfx_decompress_segment

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, deactivate `/gfx` (…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Critical 9.8
    CVE-2024-32458

    FreeRDP Out-Of-Bounds Read in planar_skip_plane_rle

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, use `/gfx` or `/rfx…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Critical 9.8
    CVE-2024-32459 Public exploit

    FreeRDP Out-Of-Bounds Read in ncrush_decompress

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients and servers that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. No known workarounds are…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Critical 9.8
    CVE-2024-32659

    freerdp_image_copy out of bound read

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read if `((nWidth == 0) and (nHeight == 0))`. Version 3.5.1 contains a patch for the issue. No known workarounds are …

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Wolfi
  • High 8.1
    CVE-2024-32040

    FreeRDP vulnerable to integer underflow in nsc_rle_decode

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 and have connections to servers using the `NSC` codec are vulnerable to integer underflow. Versions 3.5.0 and 2.11.6 …

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • High 8.1
    CVE-2024-32460

    FreeRDP Out-Of-Bounds Read in interleaved_decompress

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based based clients using `/bpp:32` legacy `GDI` drawing path with a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • High 7.5
    CVE-2024-32660

    FreeRDP zgfx_decompress out of memory vulnerability

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.5.1, a malicious server can crash the FreeRDP client by sending invalid huge allocation size. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Wolfi
  • Low 3.7
    CVE-2024-22211

    FreeRDP integer Overflow leading to Heap Overflow

    FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in `freerdp_bitmap_planar_context_reset` leads to heap-buffer overflow. This affects FreeRDP based clients. FreeRDP based server imp…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine Wolfi

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-22211.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-32039.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-32040.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-32041.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-32458.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-32459.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-32460.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-32659.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-32660.html