First published: Tue Apr 23 2024(Updated: )
FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. Version 3.5.1 contains a patch for the issue. No known workarounds are available.
Credit: security-advisories@github.com security-advisories@github.com
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/FreeRDP | <3.5.1 | 3.5.1 |
FreeRDP | <2.11.7 | |
FreeRDP | >=3.0.0<3.5.1 | |
Red Hat Fedora | =38 | |
Red Hat Fedora | =39 | |
Red Hat Fedora | =40 | |
debian/freerdp2 | <=2.3.0+dfsg1-2+deb11u1<=2.10.0+dfsg1-1 | 2.3.0+dfsg1-2+deb11u3 |
debian/freerdp3 | 3.14.0+dfsg-1 3.14.1+dfsg-2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-32658 has been classified as a medium severity vulnerability due to the potential for out-of-bounds read affecting FreeRDP clients.
To fix CVE-2024-32658, upgrade to FreeRDP version 3.5.1 or later.
FreeRDP clients prior to version 3.5.1 are vulnerable to CVE-2024-32658.
No known workarounds are available for CVE-2024-32658.
CVE-2024-32658 affects FreeRDP implementations on various distributions including Ubuntu and Debian.