Ubuntu 24.04 LTS. : FreeRDP vulnerabilities (USN-6759-1)

The remote Ubuntu 24.04 LTS. host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6759-1 advisory. It was discovered that FreeRDP incorrectly handled certain memory operations. If a user were tricked into connecting to a malicious server, a remote...

CVE-2024-32658 vulnerabilities

Vulnerabilities for packages: freerdp...

CVE-2024-32658 vulnerabilities

Vulnerabilities for packages: freerdp...

CVE-2024-32658 FreeRDP ExtractRunLengthRegular* out of bound read

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. Version 3.5.1 contains a patch for the issue. No known workarounds are available...

CVE-2024-32658 FreeRDP ExtractRunLengthRegular* out of bound read

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. Version 3.5.1 contains a patch for the issue. No known workarounds are available...

CVE-2023-32658

Unquoted search path in some IntelR NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32658

Intel NUC HDMI firmware update tool for NUC7i3DN/NUC7i5DN/NUC7i7DN is affected by an unquoted search path vulnerability that could enable local privilege escalation for an authenticated user. The issue affects the HDMI firmware update tool software before version 1.79.1.1; updating to 1.79.1.1 or...

CVE-2023-32658

Unquoted search path in some IntelR NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32658

Unquoted search path in some IntelR NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-32658

creationtimestamp| type| source ---|---|--- 2023-01-04 00:17:27+00:00| seen| https://t.me/cibsecurity/55824 2023-07-10 13:19:09+00:00| published-proof-of-concept| https://t.me/ETHICALHACKERSCOMMUNITY2/2706...

CVE-2022-32658

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705059; Issue ID: GN20220705059...

CVE-2022-32658

CVE-2022-32658 involves a potential undefined behavior in a MediaTek Wi‑Fi driver caused by incorrect error handling, leading to local privilege escalation with System execution privileges required. Multiple sources (NVD, Red Hat advisory RH:CVE-2022-32658, and other linked entries) corroborate t...

CVE-2021-32658

The CVE-2021-32658 entry concerns the Nextcloud Android app. A timeout issue may prevent proper cleanup of sensitive data on account removal, potentially leaving key material such as End-to-End encryption keys accessible. Affected software: Nextcloud Android client (versions prior to 3.16.1). Und...