USN-6749-1: FreeRDP vulnerabilities
It was discovered that FreeRDP incorrectly handled certain context resets. If a user were tricked into connecting to a malicious server, a remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2024-22211) Evgeny Legerov discovered that FreeRDP incorrectly handled certain memory operations. If a user were tricked into connecting to a malicious server, a remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2024-32039, CVE-2024-32040) Evgeny Legerov discovered that FreeRDP incorrectly handled certain memory operations. If a user were tricked into connecting to a malicious server, a remote attacker could possibly use this issue to cause FreeRDP to crash, resulting in a denial of service. (CVE-2024-32041, CVE-2024-32458, CVE-2024-32460) Evgeny Legerov discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause FreeRDP clients and servers to crash, resulting in a denial of service. (CVE-2024-32459)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-6749-1?
The severity of USN-6749-1 is high due to the potential for denial of service and arbitrary code execution.
How do I fix USN-6749-1?
To fix USN-6749-1, update the libfreerdp2-2 package to the recommended version for your Ubuntu system.
What systems are affected by USN-6749-1?
USN-6749-1 affects Ubuntu versions 23.10, 22.04, and 20.04 that have specific versions of the libfreerdp2-2 package installed.
Can USN-6749-1 be exploited remotely?
Yes, USN-6749-1 can be exploited remotely if a user connects to a malicious server, leading to potential crashes or code execution.
Is there a workaround for USN-6749-1?
There are no known workarounds for USN-6749-1; updating the package is the only recommended solution.