Skip to content
OpenAdvisories
High WID-SEC-2024-0905 6 CVEs

FreeRDP: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Published Apr 16, 2024 · Updated Mar 11, 2026 · Revision 9 · de-DE

Vendor: Fedora Vendor: Oracle Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: openSUSE

Summary

Ein Angreifer kann mehrere Schwachstellen in FreeRDP ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

Product

FreeRDP ist eine freie Implementierung des Remote Desktop Protocol (RDP).

Vulnerabilities 6

  • Critical 9.8
    CVE-2024-32039

    FreeRDP Integer overflow & OutOfBound Write in clear_decompress_residual_data

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients using a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to integer overflow and out-of-bounds write. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, …

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Critical 9.8
    CVE-2024-32041

    FreeRDP OutOfBound Read in zgfx_decompress_segment

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, deactivate `/gfx` (…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Critical 9.8
    CVE-2024-32458

    FreeRDP Out-Of-Bounds Read in planar_skip_plane_rle

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, use `/gfx` or `/rfx…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Critical 9.8
    CVE-2024-32459 Public exploit

    FreeRDP Out-Of-Bounds Read in ncrush_decompress

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients and servers that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. No known workarounds are…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • High 8.1
    CVE-2024-32040

    FreeRDP vulnerable to integer underflow in nsc_rle_decode

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 and have connections to servers using the `NSC` codec are vulnerable to integer underflow. Versions 3.5.0 and 2.11.6 …

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • High 8.1
    CVE-2024-32460

    FreeRDP Out-Of-Bounds Read in interleaved_decompress

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based based clients using `/bpp:32` legacy `GDI` drawing path with a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu

Revision history

  1. #9

    Neue Updates von openSUSE aufgenommen

  2. #8

    Neue Updates von Ubuntu aufgenommen

  3. #7

    Neue Updates von Ubuntu aufgenommen

  4. #6

    Neue Updates von Oracle Linux aufgenommen

  5. #5

    Neue Updates von Red Hat aufgenommen

  6. #4

    Neue Updates von SUSE aufgenommen

  7. #3

    Neue Updates von Ubuntu aufgenommen

  8. #2

    Neue Updates von Fedora aufgenommen

  9. #1

    Initiale Fassung

References