RHSA-2024:9092: Moderate: freerdp security update

First published: Tue Nov 12 2024(Updated: )

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.<br>Security Fix(es):<br><li> freerdp: Integer Overflow leading to Heap Overflow in freerdp_bitmap_planar_context_reset (CVE-2024-22211)</li> <li> freerdp: out-of-bounds read in ncrush_decompress (CVE-2024-32459)</li> <li> freerdp: OutOfBound Read in interleaved_decompress (CVE-2024-32460)</li> <li> freerdp: Integer overflow &amp; OutOfBound Write in clear_decompress_residual_data (CVE-2024-32039)</li> <li> freerdp: integer underflow in nsc_rle_decode (CVE-2024-32040)</li> <li> freerdp: OutOfBound Read in zgfx_decompress_segment (CVE-2024-32041)</li> <li> freerdp: OutOfBound Read in planar_skip_plane_rle (CVE-2024-32458)</li> <li> freerdp: out-of-bounds read (CVE-2024-32662)</li> <li> FreeRDP: ExtractRunLengthRegular* out of bound read (CVE-2024-32658)</li> <li> freerdp: zgfx_decompress out of memory (CVE-2024-32660)</li> <li> freerdp: freerdp_image_copy out of bound read (CVE-2024-32659)</li> <li> freerdp: rdp_write_logon_info_v1 NULL access (CVE-2024-32661)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Additional Changes:<br>For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes linked from the References section.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/redhat-errata-latest
• source/Red Hat
• anchor-id/RHSA-2024:9092
• agent/software-canonical-lookup
• agent/severity
• agent/type
• agent/references
• agent/last-modified-date
• agent/remedy
• agent/title
• agent/weakness
• agent/softwarecombine
• agent/description
• agent/first-publish-date
• agent/tags
• agent/event
• collector/redhat-errata
• vendor/red hat
• canonical/red hat red hat codeready linux builder for x86_64
• canonical/red hat red hat enterprise linux for x86_64
• canonical/red hat red hat enterprise linux for ibm z systems
• canonical/red hat red hat enterprise linux for arm 64
• canonical/red hat red hat codeready linux builder for power, little endian
• canonical/red hat red hat enterprise linux for power, little endian
• canonical/red hat red hat codeready linux builder for ibm z systems
• canonical/red hat red hat codeready linux builder for arm 64
• package-manager/redhat