Lucene search

Alpine Linux Development TeamALPINE:CVE-2024-32039

HistoryApr 22, 2024 - 9:15 p.m.

CVE-2024-32039

2024-04-2221:15:49

Alpine Linux Development Team

security.alpinelinux.org

freerdp

remote desktop protocol

integer overflow

out-of-bounds write

security vulnerability

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

JSON

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients using a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to integer overflow and out-of-bounds write. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, do not use /gfx options (e.g. deactivate with /bpp:32 or /rfx as it is on by default).

OSVersionArchitecturePackageVersionFilename
Alpine3.20-communitynoarchfreerdp= 2.11.5-r1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	3.20-community	noarch	freerdp	= 2.11.5-r1	UNKNOWN

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

JSON

Related for ALPINE:CVE-2024-32039