p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de freerdp3 · Página 11

Vulnerabilidades publicadas para freerdp3 en los últimos 30 días: 69. Incluidas en el catálogo KEV: 0.

Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 205

  1. CVE-2024-32662

    Alta · CVSS 7.5EPSS 0,77%Corrección disponible

    FreeRDP rdp_redirection_read_base64_wchar out of bound read

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. This occurs when `WCHAR` string is read with twice the size it has and converted to `UTF-8`, `base64` decoded. The string is only used to compare against the redirection server certificate. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

    • Actualiza a 3.5.1+dfsg1-1
    Publicación Actualización
  2. CVE-2024-32661

    Alta · CVSS 7.5EPSS 1,21%Corrección disponible

    FreeRDP rdp_write_logon_info_v1 NULL access

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to a possible `NULL` access and crash. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

    • Actualiza a 3.5.1+dfsg1-1
    Publicación Actualización
  3. CVE-2024-32660

    Alta · CVSS 7.5EPSS 1,17%Corrección disponible

    FreeRDP zgfx_decompress out of memory vulnerability

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.5.1, a malicious server can crash the FreeRDP client by sending invalid huge allocation size. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

    • Actualiza a 3.5.1+dfsg1-1
    Publicación Actualización
  4. CVE-2024-32659

    Crítica · CVSS 9.8EPSS 1,18%Corrección disponible

    freerdp_image_copy out of bound read

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read if `((nWidth == 0) and (nHeight == 0))`. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

    • Actualiza a 3.5.1+dfsg1-1
    Publicación Actualización
  5. CVE-2024-32658

    Crítica · CVSS 9.8EPSS 1,36%Corrección disponible

    FreeRDP ExtractRunLengthRegular* out of bound read

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

    • Actualiza a 3.5.1+dfsg1-1
    Publicación Actualización

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →