Skip to content
OpenAdvisories
Critical RHSA-2024:9092 12 CVEs

Red Hat Security Advisory: freerdp security update

Published Nov 12, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 13

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream freerdp 2:2.11.7-1.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream freerdp-debuginfo 2:2.11.7-1.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream freerdp-debugsource 2:2.11.7-1.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream freerdp-libs 2:2.11.7-1.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream freerdp-libs-debuginfo 2:2.11.7-1.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream libwinpr 2:2.11.7-1.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream libwinpr-debuginfo 2:2.11.7-1.el9
Red Hat · RHEL 9 enterprise_linux:9::crb freerdp-debuginfo 2:2.11.7-1.el9
Red Hat · RHEL 9 enterprise_linux:9::crb freerdp-debugsource 2:2.11.7-1.el9
Red Hat · RHEL 9 enterprise_linux:9::crb freerdp-devel 2:2.11.7-1.el9
Red Hat · RHEL 9 enterprise_linux:9::crb freerdp-libs-debuginfo 2:2.11.7-1.el9
Red Hat · RHEL 9 enterprise_linux:9::crb libwinpr-debuginfo 2:2.11.7-1.el9
Red Hat · RHEL 9 enterprise_linux:9::crb libwinpr-devel 2:2.11.7-1.el9

Vulnerabilities 12

  • Critical 9.8
    CVE-2024-32039

    FreeRDP Integer overflow & OutOfBound Write in clear_decompress_residual_data

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients using a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to integer overflow and out-of-bounds write. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, …

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Critical 9.8
    CVE-2024-32041

    FreeRDP OutOfBound Read in zgfx_decompress_segment

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, deactivate `/gfx` (…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Critical 9.8
    CVE-2024-32458

    FreeRDP Out-Of-Bounds Read in planar_skip_plane_rle

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, use `/gfx` or `/rfx…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Critical 9.8
    CVE-2024-32459 Public exploit

    FreeRDP Out-Of-Bounds Read in ncrush_decompress

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients and servers that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. No known workarounds are…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Critical 9.8
    CVE-2024-32658

    FreeRDP ExtractRunLengthRegular* out of bound read

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Wolfi
  • Critical 9.8
    CVE-2024-32659

    freerdp_image_copy out of bound read

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read if `((nWidth == 0) and (nHeight == 0))`. Version 3.5.1 contains a patch for the issue. No known workarounds are …

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Wolfi
  • High 8.1
    CVE-2024-32040

    FreeRDP vulnerable to integer underflow in nsc_rle_decode

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 and have connections to servers using the `NSC` codec are vulnerable to integer underflow. Versions 3.5.0 and 2.11.6 …

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • High 8.1
    CVE-2024-32460

    FreeRDP Out-Of-Bounds Read in interleaved_decompress

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based based clients using `/bpp:32` legacy `GDI` drawing path with a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • High 7.5
    CVE-2024-32660

    FreeRDP zgfx_decompress out of memory vulnerability

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.5.1, a malicious server can crash the FreeRDP client by sending invalid huge allocation size. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Wolfi
  • High 7.5
    CVE-2024-32661

    FreeRDP rdp_write_logon_info_v1 NULL access

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to a possible `NULL` access and crash. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Wolfi
  • High 7.5
    CVE-2024-32662

    FreeRDP rdp_redirection_read_base64_wchar out of bound read

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. This occurs when `WCHAR` string is read with twice the size it has and converted to `UTF-8`, `base64` decoded. …

    FreeRDP FreeRDP freerdp3 freerdp3 Debian Ubuntu Wolfi
  • Low 3.7
    CVE-2024-22211

    FreeRDP integer Overflow leading to Heap Overflow

    FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in `freerdp_bitmap_planar_context_reset` leads to heap-buffer overflow. This affects FreeRDP based clients. FreeRDP based server imp…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine Wolfi

References

  • article
    https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index
  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2259483
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2276721
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2276722
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2276723
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2276724
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2276725
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2276726
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2276804
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2276961
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2276968
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2276970
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2276971
  • article
    https://issues.redhat.com/browse/RHEL-33988
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9092.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-22211
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-22211
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-22211
  • article
    https://github.com/FreeRDP/FreeRDP/commit/939e922936e9c3ae8fc204968645e5e7563a2fff
  • article
    https://github.com/FreeRDP/FreeRDP/commit/aeac3040cc99eeaff1e1171a822114c857b9dca9
  • article
    https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rjhp-44rv-7v59
  • report
    https://access.redhat.com/security/cve/CVE-2024-32039
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-32039
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-32039
  • article
    https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q5h8-7j42-j4r9
  • report
    https://access.redhat.com/security/cve/CVE-2024-32040
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-32040
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-32040
  • article
    https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-23c5-cp23-h2h5
  • report
    https://access.redhat.com/security/cve/CVE-2024-32041
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-32041
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-32041
  • article
    https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5r4p-mfx2-m44r
  • report
    https://access.redhat.com/security/cve/CVE-2024-32458
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-32458
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-32458
  • article
    https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vvr6-h646-mp4p
  • report
    https://access.redhat.com/security/cve/CVE-2024-32459