Skip to content
OpenAdvisories
High WID-SEC-2024-0954 5 CVEs

FreeRDP: Mehrere Schwachstellen

Published Apr 23, 2024 · Updated Mar 11, 2026 · Revision 12 · de-DE

Vendor: Debian Vendor: Oracle Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: openSUSE Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in FreeRDP ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder einen Denial-of-Service-Zustand zu verursachen.

Product

FreeRDP ist eine freie Implementierung des Remote Desktop Protocol (RDP).

Vulnerabilities 5

  • Critical 9.8
    CVE-2024-32658

    FreeRDP ExtractRunLengthRegular* out of bound read

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Wolfi
  • Critical 9.8
    CVE-2024-32659

    freerdp_image_copy out of bound read

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read if `((nWidth == 0) and (nHeight == 0))`. Version 3.5.1 contains a patch for the issue. No known workarounds are …

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Wolfi
  • High 7.5
    CVE-2024-32660

    FreeRDP zgfx_decompress out of memory vulnerability

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.5.1, a malicious server can crash the FreeRDP client by sending invalid huge allocation size. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Wolfi
  • High 7.5
    CVE-2024-32661

    FreeRDP rdp_write_logon_info_v1 NULL access

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to a possible `NULL` access and crash. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Wolfi
  • High 7.5
    CVE-2024-32662

    FreeRDP rdp_redirection_read_base64_wchar out of bound read

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. This occurs when `WCHAR` string is read with twice the size it has and converted to `UTF-8`, `base64` decoded. …

    FreeRDP FreeRDP freerdp3 freerdp3 Debian Ubuntu Wolfi

Revision history

  1. #12

    Neue Updates von openSUSE aufgenommen

  2. #11

    Neue Updates von Ubuntu aufgenommen

  3. #10

    Neue Updates von Ubuntu aufgenommen

  4. #9

    Neue Updates von Debian aufgenommen

  5. #8

    Neue Updates von Oracle Linux aufgenommen

  6. #7

    Neue Updates von Red Hat aufgenommen

  7. #6

    Neue Updates von SUSE aufgenommen

  8. #5

    Neue Updates von SUSE aufgenommen

  9. #4

    Neue Updates von SUSE aufgenommen

  10. #3

    Neue Updates von Ubuntu aufgenommen

  11. #2

    Neue Updates von Ubuntu aufgenommen

  12. #1

    Initiale Fassung

References