Skip to content
OpenAdvisories
Medium RHSA-2024:2208 12 CVEs

Red Hat Security Advisory: freerdp security update

Published Sep 16, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 13

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream freerdp 2:2.11.2-1.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream freerdp-debuginfo 2:2.11.2-1.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream freerdp-debugsource 2:2.11.2-1.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream freerdp-libs 2:2.11.2-1.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream freerdp-libs-debuginfo 2:2.11.2-1.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream libwinpr 2:2.11.2-1.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream libwinpr-debuginfo 2:2.11.2-1.el9
Red Hat · RHEL 9 enterprise_linux:9::crb freerdp-debuginfo 2:2.11.2-1.el9
Red Hat · RHEL 9 enterprise_linux:9::crb freerdp-debugsource 2:2.11.2-1.el9
Red Hat · RHEL 9 enterprise_linux:9::crb freerdp-devel 2:2.11.2-1.el9
Red Hat · RHEL 9 enterprise_linux:9::crb freerdp-libs-debuginfo 2:2.11.2-1.el9
Red Hat · RHEL 9 enterprise_linux:9::crb libwinpr-debuginfo 2:2.11.2-1.el9
Red Hat · RHEL 9 enterprise_linux:9::crb libwinpr-devel 2:2.11.2-1.el9

Vulnerabilities 12

  • Medium 6.5
    CVE-2023-40186

    IntegerOverflow leading to Out-Of-Bound Write Vulnerability in FreeRDP

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the `gdi_CreateSurface` function. This issue affects F…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 6.5
    CVE-2023-40567

    Out-Of-Bounds Write in FreeRDP

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the `clear_decompress_bands_data` function in which there is no offset validation. Abuse of th…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 6.5
    CVE-2023-40569

    Out-Of-Bounds Write in FreeRDP

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the `progressive_decompress` function. This issue is likely down to incorrect calculations of …

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 5.9
    CVE-2023-39350

    Incorrect offset calculation leading to denial of service in FreeRDP

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. This issue affects Clients only. Integer underflow leading to DOS (e.g. abort due to `WINPR_ASSERT` with default compilation flags). When an insufficient…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 5.9
    CVE-2023-39354

    FreeRDP Out-Of-Bounds Read in nsc_rle_decompress_data

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the `nsc_rle_decompress_data` function. The Out-Of-Bounds Read occurs because it processes `con…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 5.3
    CVE-2023-39351

    FreeRDP Null Pointer Dereference leading denial of service

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of FreeRDP are subject to a Null Pointer Dereference leading a crash in the RemoteFX (rfx) handling. Inside the `rfx_process_message_ti…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 5.3
    CVE-2023-39352

    Invalid offset validation leading to Out Of Bound Write in FreeRDP

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an invalid offset validation leading to Out Of Bound Write. This can be triggered when the values `rect->left` and `rect…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 5.3
    CVE-2023-39353

    Missing offset validation leading to Out Of Bound Read in FreeRDP

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to a missing offset validation leading to Out Of Bound Read. In the `libfreerdp/codec/rfx.c` file there is no offset valida…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 5.3
    CVE-2023-39356

    Missing offset validation leading to Out-of-Bounds Read in FreeRDP

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a missing offset validation may lead to an Out Of Bound Read in the function `gdi_multi_opaque_rect`. In particular there is no code…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 5.3
    CVE-2023-40181

    Integer-Underflow leading to Out-Of-Bound Read in FreeRDP

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Integer-Underflow leading to Out-Of-Bound Read in the `zgfx_decompress_segment` function. In the context of `CopyMemo…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 5.3
    CVE-2023-40188

    Out-Of-Bounds Read in FreeRDP

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the `general_LumaToYUV444` function. This Out-Of-Bounds Read occurs because processing is done …

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 4.3
    CVE-2023-40589

    FreeRDP Global-Buffer-Overflow in ncrush_decompress

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions there is a Global-Buffer-Overflow in the ncrush_decompress function. Feeding crafted input into this function can trigger the overfl…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2236606
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2236650
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2236656
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2236669
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2236730
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2236750
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2236759
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2236763
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2236766
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2236774
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2236779
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2236784
  • article
    https://issues.redhat.com/browse/RHEL-10060
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2208.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-39350
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-39350
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-39350
  • article
    https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rrrv-3w42-pffh
  • report
    https://access.redhat.com/security/cve/CVE-2023-39351
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-39351
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-39351
  • article
    https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q9x9-cqjc-rgwq
  • report
    https://access.redhat.com/security/cve/CVE-2023-39352
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-39352
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-39352
  • article
    https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-whwr-qcf2-2mvj
  • report
    https://access.redhat.com/security/cve/CVE-2023-39353
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-39353
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-39353
  • article
    https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hg53-9j9h-3c8f
  • report
    https://access.redhat.com/security/cve/CVE-2023-39354
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-39354
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-39354
  • article
    https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c3r2-pxxp-f8r6
  • report
    https://access.redhat.com/security/cve/CVE-2023-39356
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-39356
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-39356