Skip to content
OpenAdvisories
Medium ALAS2-2024-2563 1 CVE

Moderate: freerdp security update (Amazon Linux 2)

Published Jun 6, 2024 · Updated Jun 12, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-32661: FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to a possible `NULL` access and crash. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

Fixed packages 6

ReleasePackageFixed in
Amazon Linux · 2 freerdp 2:2.11.7-1.amzn2.0.2
Amazon Linux · 2 freerdp-debuginfo 2:2.11.7-1.amzn2.0.2
Amazon Linux · 2 freerdp-devel 2:2.11.7-1.amzn2.0.2
Amazon Linux · 2 freerdp-libs 2:2.11.7-1.amzn2.0.2
Amazon Linux · 2 libwinpr 2:2.11.7-1.amzn2.0.2
Amazon Linux · 2 libwinpr-devel 2:2.11.7-1.amzn2.0.2

Vulnerabilities 1

  • High 7.5
    CVE-2024-32661

    FreeRDP rdp_write_logon_info_v1 NULL access

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to a possible `NULL` access and crash. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Wolfi

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-32661.html