p PatchFirst

PatchFirst · Latest vulnerabilities

freerdp3 vulnerabilities · Page 11

Vulnerabilities published for freerdp3 in the last 30 days: 69. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 205

  1. CVE-2024-32662

    High · CVSS 7.5EPSS 0.77%Fix available

    FreeRDP rdp_redirection_read_base64_wchar out of bound read

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. This occurs when `WCHAR` string is read with twice the size it has and converted to `UTF-8`, `base64` decoded. The string is only used to compare against the redirection server certificate. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

    • Update to 3.5.1+dfsg1-1
    Published Updated
  2. CVE-2024-32660

    High · CVSS 7.5EPSS 1.17%Fix available

    FreeRDP zgfx_decompress out of memory vulnerability

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.5.1, a malicious server can crash the FreeRDP client by sending invalid huge allocation size. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

    • Update to 3.5.1+dfsg1-1
    Published Updated
  3. CVE-2024-32659

    Critical · CVSS 9.8EPSS 1.18%Fix available

    freerdp_image_copy out of bound read

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read if `((nWidth == 0) and (nHeight == 0))`. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

    • Update to 3.5.1+dfsg1-1
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →