FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read if `((nWidth == 0) and (nHeight == 0))`. Version 3.5.1 contains a patch for the issue. No known workarounds are available.
References
Configurations
History
04 Feb 2025, 17:42
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Freerdp freerdp
Freerdp Fedoraproject fedora Fedoraproject |
|
| CPE | cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:* cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* |
|
| References | () https://github.com/FreeRDP/FreeRDP/commit/6430945ce003a5e24d454d8566f54aae1b6b617b - Patch | |
| References | () https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8jgr-7r33-x87w - Vendor Advisory | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5JL476WVJSIE7SBUKVJRVA6A52V2HOLZ/ - Third Party Advisory | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7SIS6NUNLUBOV4CPCSWKDE6T6C2W3WTR/ - Third Party Advisory | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PX3U6YPZQ7PEJBVKSBUOLWVH7DHROHY5/ - Third Party Advisory | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKI4UISUXYNBPN4K6TIQKDRTIJ6CDCKJ/ - Third Party Advisory | |
| References | () https://oss-fuzz.com/testcase-detail/6156779722440704 - Permissions Required |
Information
Published : 2024-04-23 20:15
Updated : 2025-02-04 17:42
NVD link : CVE-2024-32659
Mitre link : CVE-2024-32659
CVE.ORG link : CVE-2024-32659
JSON object : View
Products Affected
fedoraproject
- fedora
freerdp
- freerdp
CWE
CWE-125
Out-of-bounds Read