p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости freerdp3 · Страница 11

За последние 30 дней в freerdp3 опубликовано уязвимостей: 69; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 205

  1. CVE-2024-32662

    Высокий · CVSS 7.5EPSS 0,77%Есть исправление

    FreeRDP rdp_redirection_read_base64_wchar out of bound read

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. This occurs when `WCHAR` string is read with twice the size it has and converted to `UTF-8`, `base64` decoded. The string is only used to compare against the redirection server certificate. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

    • Обновитесь до 3.5.1+dfsg1-1
    Опубликовано Обновлено
  2. CVE-2024-32661

    Высокий · CVSS 7.5EPSS 1,21%Есть исправление

    FreeRDP rdp_write_logon_info_v1 NULL access

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to a possible `NULL` access and crash. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

    • Обновитесь до 3.5.1+dfsg1-1
    Опубликовано Обновлено
  3. CVE-2024-32660

    Высокий · CVSS 7.5EPSS 1,17%Есть исправление

    FreeRDP zgfx_decompress out of memory vulnerability

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.5.1, a malicious server can crash the FreeRDP client by sending invalid huge allocation size. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

    • Обновитесь до 3.5.1+dfsg1-1
    Опубликовано Обновлено
  4. CVE-2024-32659

    Критический · CVSS 9.8EPSS 1,18%Есть исправление

    freerdp_image_copy out of bound read

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read if `((nWidth == 0) and (nHeight == 0))`. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

    • Обновитесь до 3.5.1+dfsg1-1
    Опубликовано Обновлено
  5. CVE-2024-32658

    Критический · CVSS 9.8EPSS 1,36%Есть исправление

    FreeRDP ExtractRunLengthRegular* out of bound read

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

    • Обновитесь до 3.5.1+dfsg1-1
    Опубликовано Обновлено

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →