USN-6752-1: FreeRDP vulnerabilities
It was discovered that FreeRDP incorrectly handled certain memory operations. If a user were tricked into connecting to a malicious server, a remote attacker could possibly use this issue to cause FreeRDP to crash, resulting in a denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libfreerdp2-2to a version that resolves this vulnerability.Fixed in 2.10.0+dfsg1-1.1ubuntu1.3 - Upgrade
Upgrade
ubuntu/libfreerdp2-2to a version that resolves this vulnerability.Fixed in 2.6.1+dfsg1-3ubuntu2.7 - Upgrade
Upgrade
ubuntu/libfreerdp2-2to a version that resolves this vulnerability.Fixed in 2.6.1+dfsg1-0ubuntu0.20.04.2
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-6752-1?
USN-6752-1 has been classified as having a high severity level due to its potential for causing denial of service.
How do I fix USN-6752-1?
To resolve USN-6752-1, update the libfreerdp2-2 package to version 2.10.0+dfsg1-1.1ubuntu1.3 for Ubuntu 23.10 or the appropriate version for your Ubuntu distribution.
What versions of Ubuntu are affected by USN-6752-1?
USN-6752-1 affects Ubuntu versions 23.10, 22.04, and 20.04 that have specific versions of the libfreerdp2-2 package.
What type of vulnerability is USN-6752-1?
USN-6752-1 is a memory handling vulnerability that can lead to application crashes.
Who can exploit USN-6752-1?
A remote attacker can exploit USN-6752-1 if a user is tricked into connecting to a malicious server.