Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2024-32662
HistoryApr 23, 2024 - 9:15 p.m.

CVE-2024-32662

2024-04-2321:15:48
CWE-125
[email protected]
web.nvd.nist.gov
45
freerdp
remote desktop protocol
out-of-bounds read
wchar string
utf-8
base64
redirection server certificate
vulnerability
patch
nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.4 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

15.1%

JSON

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. This occurs when WCHAR string is read with twice the size it has and converted to UTF-8, base64 decoded. The string is only used to compare against the redirection server certificate. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

VendorProductVersionCPE
freerdpfreerdp*cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*

Related

cgr 1
cvelist 1
redhatcve 1
debiancve 1
osv 2
veracode 1
ubuntucve 1
wolfi 1
openvas 2
ubuntu 1
nessus 7
fedora 4
cgr
cgr
CVE-2024-32662 vulnerabilities
2024-05-19 03:07:16
cvelist
cvelist
CVE-2024-32662 FreeRDP rdp_redirection_read_base64_wchar out of bound read
2024-04-23 20:17:30
redhatcve
redhatcve
CVE-2024-32662
2024-04-24 05:04:32
debiancve
debiancve
CVE-2024-32662
2024-04-23 21:15:48
osv
osv
CVE-2024-32662
2024-04-23 21:15:48
freerdp3 vulnerabilities
2024-04-29 16:44:07
veracode
veracode
Out-of-bounds Read
2024-04-25 07:35:22
ubuntucve
ubuntucve
CVE-2024-32662
2024-04-23 00:00:00
wolfi
wolfi
CVE-2024-32662 vulnerabilities
2024-05-29 03:07:31
openvas
openvas
FreeRDP < 3.5.1 Multiple Vulnerabilities
2024-04-24 00:00:00
Ubuntu: Security Advisory (USN-6759-1)
2024-04-30 00:00:00
ubuntu
ubuntu
FreeRDP vulnerabilities
2024-04-29 00:00:00
nessus
nessus
Ubuntu 24.04 LTS. : FreeRDP vulnerabilities (USN-6759-1)
2024-04-29 00:00:00
Fedora 40 : freerdp (2024-050266dc33)
2024-05-09 00:00:00
Fedora 40 : freerdp2 (2024-982a7184e0)
2024-05-09 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: freerdp2-2.11.7-1.fc40
2024-05-09 01:41:53
[SECURITY] Fedora 38 Update: freerdp-2.11.7-1.fc38
2024-05-09 01:49:12
[SECURITY] Fedora 39 Update: freerdp-2.11.7-1.fc39
2024-05-09 02:05:21

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.4 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

15.1%

JSON
Related for CVE-2024-32662
cgr1cvelist1redhatcve1debiancve1osv2veracode1ubuntucve1wolfi1openvas2ubuntu1nessus7fedora4