SUSE SLED15: freerdp / freerdp-devel / freerdp-proxy / freerdp-server / etc (SUSE-SU-2024:2631-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2631-1 advisory. - CVE-2024-22211: Fixed integer overflow in freerdpbitmapplanarcontextreset that could lead to...

SUSE-SU-2024:2631-1 Security update for freerdp

This update for freerdp fixes the following issues: - CVE-2024-22211: Fixed integer overflow in freerdpbitmapplanarcontextreset that could lead to heap-buffer overflow bsc1219049 - CVE-2024-32658: Fixed out-of-bounds read in Interleaved RLE Bitmap Codec in FreeRDP based clients bsc1223353 -...

Huawei EulerOS: Security Advisory for freerdp (EulerOS-SA-2024-2027)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : freerdp (EulerOS-SA-2024-2027)

According to the versions of the freerdp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in...

CLSA-2024-1721206783 freerdp: Fix of 12 CVEs

CVE-2023-39352: add bound check in gdiSolidFill - CVE-2023-39353: check indices are within range - CVE-2023-39356: fix checks for multi opaque rect - CVE-2023-40181: fix cBitsRemaining calculation - CVE-2023-40186: fix integer multiplications - CVE-2023-40188: fix input length validation -...

OPENSUSE-SU-2024:10110-1 freerdp-2.0.0~git.1463131968.4e66df7-2.5 on GA media

These are all security issues fixed in the freerdp-2.0.0git.1463131968.4e66df7-2.5 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13504-1 freerdp-2.11.2-3.1 on GA media

These are all security issues fixed in the freerdp-2.11.2-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12515-1 freerdp-2.8.1-1.1 on GA media

These are all security issues fixed in the freerdp-2.8.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11591-1 freerdp-2.4.1-1.1 on GA media

These are all security issues fixed in the freerdp-2.4.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13815-1 freerdp-3.4.0-1.1 on GA media

These are all security issues fixed in the freerdp-3.4.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13900-1 freerdp-3.5.1-1.1 on GA media

These are all security issues fixed in the freerdp-3.5.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12523-1 freerdp-2.9.0-1.1 on GA media

These are all security issues fixed in the freerdp-2.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10768-1 freerdp-2.4.0-2.1 on GA media

These are all security issues fixed in the freerdp-2.4.0-2.1 package on the GA media of openSUSE Tumbleweed...

Medium: freerdp

Issue Overview: FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to a possible NULL access and crash. Version 3.5.1 contains a patch for the issue. No known workarounds are available. CVE-2024-32661 Affected Packages:...

Medium: freerdp

Issue Overview: FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to a possible NULL access and crash. Version 3.5.1 contains a patch for the issue. No known workarounds are available. CVE-2024-32661 Affected Packages:...

Amazon Linux 2 : freerdp (ALAS-2024-2563)

The version of freerdp installed on the remote host is prior to 2.11.7-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2563 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to a...

RHEL 8 : freerdp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - freerdp: Integer Overflow leading to Heap Overflow in freerdpbitmapplanarcontextreset CVE-2024-22211 -...

RHEL 7 : freerdp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - freerdp: Out-of-bounds write in rdprecvtpktpdu CVE-2017-2835 - FreeRDP before 1.1.0-beta1 allows remote...

RHEL 6 : freerdp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - freerdp: Out-of-bounds write in nscrledecode function CVE-2018-8788 - FreeRDP before 1.1.0-beta1 allows...

SUSE-SU-2024:1856-1 Security update for freerdp

This update for freerdp fixes the following issues: - CVE-2024-32658: Fixed out-of-bounds read in Interleaved RLE Bitmap Codec bsc1223353. - CVE-2024-32659: Fixed out-of-bounds read if nWidth == 0 and nHeight == 0 bsc1223346 - CVE-2024-32660: Fixed client crash via invalid huge allocation size...