Lucene search
UbuntuUSN-6752-1HistoryApr 25, 2024 - 12:00 a.m.
FreeRDP vulnerabilities
2024-04-2500:00:00
ubuntu.com
15
freerdp
memory operations
ubuntu
denial of service
rdp client
malicious server
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.1
Confidence
Low
EPSS
0
Percentile
13.0%
Releases
- Ubuntu 23.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Packages
- freerdp2 - RDP client for Windows Terminal Services
Details
It was discovered that FreeRDP incorrectly handled certain memory
operations. If a user were tricked into connecting to a malicious server, a
remote attacker could possibly use this issue to cause FreeRDP to crash,
resulting in a denial of service.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 23.10 | noarch | libfreerdp2-2 | < 2.10.0+dfsg1-1.1ubuntu1.3 | UNKNOWN |
| Ubuntu | 23.10 | noarch | freerdp2-dev | < 2.10.0+dfsg1-1.1ubuntu1.3 | UNKNOWN |
| Ubuntu | 23.10 | noarch | freerdp2-shadow-x11 | < 2.10.0+dfsg1-1.1ubuntu1.3 | UNKNOWN |
| Ubuntu | 23.10 | noarch | freerdp2-shadow-x11-dbgsym | < 2.10.0+dfsg1-1.1ubuntu1.3 | UNKNOWN |
| Ubuntu | 23.10 | noarch | freerdp2-wayland | < 2.10.0+dfsg1-1.1ubuntu1.3 | UNKNOWN |
| Ubuntu | 23.10 | noarch | freerdp2-wayland-dbgsym | < 2.10.0+dfsg1-1.1ubuntu1.3 | UNKNOWN |
| Ubuntu | 23.10 | noarch | freerdp2-x11 | < 2.10.0+dfsg1-1.1ubuntu1.3 | UNKNOWN |
| Ubuntu | 23.10 | noarch | freerdp2-x11-dbgsym | < 2.10.0+dfsg1-1.1ubuntu1.3 | UNKNOWN |
| Ubuntu | 23.10 | noarch | libfreerdp-client2-2 | < 2.10.0+dfsg1-1.1ubuntu1.3 | UNKNOWN |
| Ubuntu | 23.10 | noarch | libfreerdp-client2-2-dbgsym | < 2.10.0+dfsg1-1.1ubuntu1.3 | UNKNOWN |
Related
openvas
openvas
openSUSE: Security Advisory for freerdp (SUSE-SU-2024:1856-1)
2024-08-20 00:00:00
Ubuntu: Security Advisory (USN-6752-1)
2024-04-26 00:00:00
Ubuntu: Security Advisory (USN-6759-1)
2024-04-30 00:00:00
osv
osv
freerdp2-devel-2.11.5-3.1 on GA media
2024-06-15 00:00:00
freerdp2 vulnerabilities
2024-04-25 14:39:56
freerdp3 vulnerabilities
2024-04-29 16:44:07
nessus
nessus
SUSE SLED12 / SLES12 Security Update : freerdp (SUSE-SU-2024:1835-1)
2024-05-30 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS / 23.10 : FreeRDP vulnerabilities (USN-6752-1)
2024-04-25 00:00:00
Ubuntu 24.04 LTS. : FreeRDP vulnerabilities (USN-6759-1)
2024-04-29 00:00:00
ubuntu
ubuntu
FreeRDP vulnerabilities
2024-04-29 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: freerdp-3.5.1-1.fc40
2024-05-09 01:41:51
[SECURITY] Fedora 38 Update: freerdp-2.11.7-1.fc38
2024-05-09 01:49:12
[SECURITY] Fedora 39 Update: freerdp-2.11.7-1.fc39
2024-05-09 02:05:21
nvd
nvd
cvelist
cvelist
CVE-2024-32661 FreeRDP rdp_write_logon_info_v1 NULL access
2024-04-23 20:05:50
CVE-2024-32658 FreeRDP ExtractRunLengthRegular* out of bound read
2024-04-23 17:41:21
CVE-2024-32659 freerdp_image_copy out of bound read
2024-04-23 19:40:24
vulnrichment
vulnrichment
CVE-2024-32661 FreeRDP rdp_write_logon_info_v1 NULL access
2024-04-23 20:05:50
CVE-2024-32659 freerdp_image_copy out of bound read
2024-04-23 19:40:24
CVE-2024-32658 FreeRDP ExtractRunLengthRegular* out of bound read
2024-04-23 17:41:21
ubuntucve
ubuntucve
veracode
veracode
Denial Of Service (DoS)
2024-04-25 07:00:39
Out-of-bounds Read
2024-04-24 06:40:30
NULL Pointer Dereference
2024-04-25 07:21:04
debiancve
debiancve
cve
cve
cgr
cgr
CVE-2024-32659 vulnerabilities
2024-05-19 03:07:16
CVE-2024-32661 vulnerabilities
2024-05-19 03:07:16
CVE-2024-32660 vulnerabilities
2024-05-19 03:07:16
amazon
amazon
Medium: freerdp
2024-06-06 20:17:00
Medium: freerdp
2024-05-09 19:16:00
alpinelinux
alpinelinux
CVE-2024-32658
2024-04-23 18:15:15
CVE-2024-32661
2024-04-23 20:15:07
redhatcve
redhatcve
wolfi
wolfi
CVE-2024-32659 vulnerabilities
2024-10-01 21:13:23
CVE-2024-32658 vulnerabilities
2024-10-01 21:13:23
CVE-2024-32661 vulnerabilities
2024-10-01 21:13:23
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.1
Confidence
Low
EPSS
0
Percentile
13.0%
Related for USN-6752-1