Security update for freerdp

2024-07-3007:12:56

Google

osv.dev

freerdp

security update

cve-2024-22211

heap-buffer overflow

cve-2024-32658

out-of-bounds read

cve-2024-32659

client crash

cve-2024-32660

null pointer dereference

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

This update for freerdp fixes the following issues:

CVE-2024-22211: Fixed integer overflow in freerdp_bitmap_planar_context_reset that could lead to heap-buffer overflow (bsc#1219049)
CVE-2024-32658: Fixed out-of-bounds read in Interleaved RLE Bitmap Codec in FreeRDP based clients (bsc#1223353)
CVE-2024-32659: Fixed out-of-bounds read if ((nWidth == 0) and (nHeight == 0)) (bsc#1223346)
CVE-2024-32660: Fixed client crash via invalid huge allocation size (bsc#1223347)
CVE-2024-32661: Fixed client NULL pointer dereference (bsc#1223348)