FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. This occurs when `WCHAR` string is read with twice the size it has and converted to `UTF-8`, `base64` decoded. The string is only used to compare against the redirection server certificate. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:9092 advisory.

    * freerdp: Integer Overflow leading to Heap Overflow in freerdp_bitmap_planar_context_reset     (CVE-2024-22211)

    * freerdp: out-of-bounds read in ncrush_decompress (CVE-2024-32459)

    * freerdp: OutOfBound Read in interleaved_decompress (CVE-2024-32460)

    * freerdp: Integer overflow & OutOfBound Write in clear_decompress_residual_data (CVE-2024-32039)

    * freerdp: integer underflow in nsc_rle_decode (CVE-2024-32040)

    * freerdp: OutOfBound Read in zgfx_decompress_segment (CVE-2024-32041)

    * freerdp: OutOfBound Read in planar_skip_plane_rle (CVE-2024-32458)

    * freerdp: out-of-bounds read (CVE-2024-32662)

    * FreeRDP: ExtractRunLengthRegular* out of bound read (CVE-2024-32658)

    * freerdp: zgfx_decompress out of memory (CVE-2024-32660)

    * freerdp: freerdp_image_copy out of bound read (CVE-2024-32659)

    * freerdp: rdp_write_logon_info_v1 NULL access (CVE-2024-32661)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version     3.5.1 are vulnerable to out-of-bounds read. This occurs when `WCHAR` string is read with twice the size it     has and converted to `UTF-8`, `base64` decoded. The string is only used to compare against the redirection     server certificate. Version 3.5.1 contains a patch for the issue. No known workarounds are available.
    (CVE-2024-32662)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9092 advisory.

    - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,       CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,       CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9092 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: Integer Overflow leading to Heap Overflow in freerdp_bitmap_planar_context_reset     (CVE-2024-22211)

    * freerdp: out-of-bounds read in ncrush_decompress (CVE-2024-32459)

    * freerdp: OutOfBound Read in interleaved_decompress (CVE-2024-32460)

    * freerdp: Integer overflow & OutOfBound Write in clear_decompress_residual_data (CVE-2024-32039)

    * freerdp: integer underflow in nsc_rle_decode (CVE-2024-32040)

    * freerdp: OutOfBound Read in zgfx_decompress_segment (CVE-2024-32041)

    * freerdp: OutOfBound Read in planar_skip_plane_rle (CVE-2024-32458)

    * freerdp: out-of-bounds read (CVE-2024-32662)

    * FreeRDP: ExtractRunLengthRegular* out of bound read (CVE-2024-32658)

    * freerdp: zgfx_decompress out of memory (CVE-2024-32660)

    * freerdp: freerdp_image_copy out of bound read (CVE-2024-32659)

    * freerdp: rdp_write_logon_info_v1 NULL access (CVE-2024-32661)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-050266dc33 advisory.

    Update to 3.5.1 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459,     CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)






Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c702ea0fb1 advisory.

    Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459,     CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)




Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-1b11432d52 advisory.

    Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459,     CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)




Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-982a7184e0 advisory.

    Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459,     CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)





Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS. host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6759-1 advisory.

    It was discovered that FreeRDP incorrectly handled certain memory operations. If a user were tricked into     connecting to a malicious server, a remote attacker could possibly use this issue to cause FreeRDP to     crash, resulting in a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
232864	RockyLinux 9 : freerdp (RLSA-2024:9092)	Nessus	Rocky Linux Local Security Checks	critical
227943	Linux Distros Unpatched Vulnerability : CVE-2024-32662	Nessus	Misc.	critical
211551	Oracle Linux 9 : freerdp (ELSA-2024-9092)	Nessus	Oracle Linux Local Security Checks	critical
210790	RHEL 9 : freerdp (RHSA-2024:9092)	Nessus	Red Hat Local Security Checks	critical
195186	Fedora 40 : freerdp (2024-050266dc33)	Nessus	Fedora Local Security Checks	critical
195183	Fedora 38 : freerdp (2024-c702ea0fb1)	Nessus	Fedora Local Security Checks	critical
195182	Fedora 39 : freerdp (2024-1b11432d52)	Nessus	Fedora Local Security Checks	critical
195180	Fedora 40 : freerdp2 (2024-982a7184e0)	Nessus	Fedora Local Security Checks	critical
194731	Ubuntu 24.04 LTS. : FreeRDP vulnerabilities (USN-6759-1)	Nessus	Ubuntu Local Security Checks	critical

Detections

Analytics

CVE-2024-32662

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical