REDHAT-BUG-2483480: High severity FreeRDP vulnerability
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP client can trigger a heap-buffer-overflow write in FreeRDP's server-side clipboard (cliprdr) channel by sending a CBCLIPCAPS PDU with a too-small capabilitySetLength. This can crash the server process (remote DoS) and may be exploitable for code execution because it corrupts heap memory. This vulnerability is fixed in 3.26.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
FreeRDPto a version that resolves this vulnerability.Fixed in 3.26.0
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2483480?
The severity of REDHAT-BUG-2483480 is high, rated at 7.
How do I fix REDHAT-BUG-2483480?
To fix REDHAT-BUG-2483480, you should update FreeRDP to version 3.26.0 or later.
What risk is associated with REDHAT-BUG-2483480?
REDHAT-BUG-2483480 carries a risk score of 33, indicating a significant potential impact.
What is the cause of REDHAT-BUG-2483480?
REDHAT-BUG-2483480 is caused by a heap-buffer-overflow vulnerability in FreeRDP's server-side clipboard channel.
What types of attacks can REDHAT-BUG-2483480 enable?
REDHAT-BUG-2483480 may enable malicious RDP clients to crash the server process.