FreeRDP is a client implementation of the Remote Desktop Protocol (RDP) that follows Microsoft's open specifications. This package provides the client applications xfreerdp and wlfreerdp.
Security Fix(es):
FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients using a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to integer overflow and out-of-bounds write. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, do not use /gfx
options (e.g. deactivate with /bpp:32
or /rfx
as it is on by default).(CVE-2024-32039)
FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 and have connections to servers using the NSC
codec are vulnerable to integer underflow. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, do not use the NSC codec (e.g. use -nsc
).(CVE-2024-32040)
FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, deactivate /gfx
(on by default, set /bpp
or /rfx
options instead.(CVE-2024-32041)
FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, use /gfx
or /rfx
modes (on by default, require server side support).(CVE-2024-32458)
FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients and servers that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. No known workarounds are available.(CVE-2024-32459)
FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based based clients using /bpp:32
legacy GDI
drawing path with a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, use modern drawing paths (e.g. /rfx
or /gfx
options). The workaround requires server side support.(CVE-2024-32460)
FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. Version 3.5.1 contains a patch for the issue. No known workarounds are available.(CVE-2024-32658)
FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read if ((nWidth == 0) and (nHeight == 0))
. Version 3.5.1 contains a patch for the issue. No known workarounds are available.(CVE-2024-32659)
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.5.1, a malicious server can crash the FreeRDP client by sending invalid huge allocation size. Version 3.5.1 contains a patch for the issue. No known workarounds are available.(CVE-2024-32660)
{ "severity": "Critical" }
{ "aarch64": [ "freerdp-devel-2.11.7-1.oe1.aarch64.rpm", "freerdp-debugsource-2.11.7-1.oe1.aarch64.rpm", "libwinpr-devel-2.11.7-1.oe1.aarch64.rpm", "freerdp-help-2.11.7-1.oe1.aarch64.rpm", "freerdp-2.11.7-1.oe1.aarch64.rpm", "freerdp-debuginfo-2.11.7-1.oe1.aarch64.rpm", "libwinpr-2.11.7-1.oe1.aarch64.rpm" ], "src": [ "freerdp-2.11.7-1.oe1.src.rpm" ], "x86_64": [ "freerdp-2.11.7-1.oe1.x86_64.rpm", "libwinpr-2.11.7-1.oe1.x86_64.rpm", "freerdp-devel-2.11.7-1.oe1.x86_64.rpm", "freerdp-debugsource-2.11.7-1.oe1.x86_64.rpm", "libwinpr-devel-2.11.7-1.oe1.x86_64.rpm", "freerdp-debuginfo-2.11.7-1.oe1.x86_64.rpm", "freerdp-help-2.11.7-1.oe1.x86_64.rpm" ] }
{ "aarch64": [ "libwinpr-2.11.7-1.oe2003sp4.aarch64.rpm", "freerdp-debuginfo-2.11.7-1.oe2003sp4.aarch64.rpm", "freerdp-devel-2.11.7-1.oe2003sp4.aarch64.rpm", "freerdp-debugsource-2.11.7-1.oe2003sp4.aarch64.rpm", "freerdp-2.11.7-1.oe2003sp4.aarch64.rpm", "freerdp-help-2.11.7-1.oe2003sp4.aarch64.rpm", "libwinpr-devel-2.11.7-1.oe2003sp4.aarch64.rpm" ], "src": [ "freerdp-2.11.7-1.oe2003sp4.src.rpm" ], "x86_64": [ "freerdp-2.11.7-1.oe2003sp4.x86_64.rpm", "freerdp-devel-2.11.7-1.oe2003sp4.x86_64.rpm", "libwinpr-2.11.7-1.oe2003sp4.x86_64.rpm", "freerdp-help-2.11.7-1.oe2003sp4.x86_64.rpm", "freerdp-debugsource-2.11.7-1.oe2003sp4.x86_64.rpm", "freerdp-debuginfo-2.11.7-1.oe2003sp4.x86_64.rpm", "libwinpr-devel-2.11.7-1.oe2003sp4.x86_64.rpm" ] }
{ "aarch64": [ "libwinpr-devel-2.11.7-1.oe2203.aarch64.rpm", "freerdp-2.11.7-1.oe2203.aarch64.rpm", "freerdp-debugsource-2.11.7-1.oe2203.aarch64.rpm", "libwinpr-2.11.7-1.oe2203.aarch64.rpm", "freerdp-debuginfo-2.11.7-1.oe2203.aarch64.rpm", "freerdp-help-2.11.7-1.oe2203.aarch64.rpm", "freerdp-devel-2.11.7-1.oe2203.aarch64.rpm", "freerdp-debuginfo-2.11.7-1.oe2203sp1.aarch64.rpm", "libwinpr-2.11.7-1.oe2203sp1.aarch64.rpm", "freerdp-2.11.7-1.oe2203sp1.aarch64.rpm", "freerdp-devel-2.11.7-1.oe2203sp1.aarch64.rpm", "freerdp-help-2.11.7-1.oe2203sp1.aarch64.rpm", "libwinpr-devel-2.11.7-1.oe2203sp1.aarch64.rpm", "freerdp-debugsource-2.11.7-1.oe2203sp1.aarch64.rpm", "freerdp-debugsource-2.11.7-1.oe2203sp2.aarch64.rpm", "libwinpr-2.11.7-1.oe2203sp2.aarch64.rpm", "freerdp-devel-2.11.7-1.oe2203sp2.aarch64.rpm", "libwinpr-devel-2.11.7-1.oe2203sp2.aarch64.rpm", "freerdp-debuginfo-2.11.7-1.oe2203sp2.aarch64.rpm", "freerdp-2.11.7-1.oe2203sp2.aarch64.rpm", "freerdp-help-2.11.7-1.oe2203sp2.aarch64.rpm", "freerdp-help-2.11.7-1.oe2203sp3.aarch64.rpm", "freerdp-debugsource-2.11.7-1.oe2203sp3.aarch64.rpm", "libwinpr-2.11.7-1.oe2203sp3.aarch64.rpm", "freerdp-debuginfo-2.11.7-1.oe2203sp3.aarch64.rpm", "freerdp-2.11.7-1.oe2203sp3.aarch64.rpm", "freerdp-devel-2.11.7-1.oe2203sp3.aarch64.rpm", "libwinpr-devel-2.11.7-1.oe2203sp3.aarch64.rpm" ], "src": [ "freerdp-2.11.7-1.oe2203.src.rpm", "freerdp-2.11.7-1.oe2203sp1.src.rpm", "freerdp-2.11.7-1.oe2203sp2.src.rpm", "freerdp-2.11.7-1.oe2203sp3.src.rpm" ], "x86_64": [ "libwinpr-devel-2.11.7-1.oe2203.x86_64.rpm", "freerdp-2.11.7-1.oe2203.x86_64.rpm", "freerdp-debuginfo-2.11.7-1.oe2203.x86_64.rpm", "libwinpr-2.11.7-1.oe2203.x86_64.rpm", "freerdp-help-2.11.7-1.oe2203.x86_64.rpm", "freerdp-debugsource-2.11.7-1.oe2203.x86_64.rpm", "freerdp-devel-2.11.7-1.oe2203.x86_64.rpm", "freerdp-debuginfo-2.11.7-1.oe2203sp1.x86_64.rpm", "freerdp-2.11.7-1.oe2203sp1.x86_64.rpm", "freerdp-help-2.11.7-1.oe2203sp1.x86_64.rpm", "libwinpr-2.11.7-1.oe2203sp1.x86_64.rpm", "freerdp-devel-2.11.7-1.oe2203sp1.x86_64.rpm", "libwinpr-devel-2.11.7-1.oe2203sp1.x86_64.rpm", "freerdp-debugsource-2.11.7-1.oe2203sp1.x86_64.rpm", "libwinpr-devel-2.11.7-1.oe2203sp2.x86_64.rpm", "freerdp-help-2.11.7-1.oe2203sp2.x86_64.rpm", "freerdp-2.11.7-1.oe2203sp2.x86_64.rpm", "freerdp-debuginfo-2.11.7-1.oe2203sp2.x86_64.rpm", "freerdp-devel-2.11.7-1.oe2203sp2.x86_64.rpm", "freerdp-debugsource-2.11.7-1.oe2203sp2.x86_64.rpm", "libwinpr-2.11.7-1.oe2203sp2.x86_64.rpm", "freerdp-debugsource-2.11.7-1.oe2203sp3.x86_64.rpm", "freerdp-devel-2.11.7-1.oe2203sp3.x86_64.rpm", "freerdp-help-2.11.7-1.oe2203sp3.x86_64.rpm", "freerdp-2.11.7-1.oe2203sp3.x86_64.rpm", "freerdp-debuginfo-2.11.7-1.oe2203sp3.x86_64.rpm", "libwinpr-devel-2.11.7-1.oe2203sp3.x86_64.rpm", "libwinpr-2.11.7-1.oe2203sp3.x86_64.rpm" ] }
{ "aarch64": [ "freerdp-debuginfo-2.11.7-1.oe2203sp1.aarch64.rpm", "libwinpr-2.11.7-1.oe2203sp1.aarch64.rpm", "freerdp-2.11.7-1.oe2203sp1.aarch64.rpm", "freerdp-devel-2.11.7-1.oe2203sp1.aarch64.rpm", "freerdp-help-2.11.7-1.oe2203sp1.aarch64.rpm", "libwinpr-devel-2.11.7-1.oe2203sp1.aarch64.rpm", "freerdp-debugsource-2.11.7-1.oe2203sp1.aarch64.rpm" ], "src": [ "freerdp-2.11.7-1.oe2203sp1.src.rpm" ], "x86_64": [ "freerdp-debuginfo-2.11.7-1.oe2203sp1.x86_64.rpm", "freerdp-2.11.7-1.oe2203sp1.x86_64.rpm", "freerdp-help-2.11.7-1.oe2203sp1.x86_64.rpm", "libwinpr-2.11.7-1.oe2203sp1.x86_64.rpm", "freerdp-devel-2.11.7-1.oe2203sp1.x86_64.rpm", "libwinpr-devel-2.11.7-1.oe2203sp1.x86_64.rpm", "freerdp-debugsource-2.11.7-1.oe2203sp1.x86_64.rpm" ] }
{ "aarch64": [ "freerdp-debugsource-2.11.7-1.oe2203sp2.aarch64.rpm", "libwinpr-2.11.7-1.oe2203sp2.aarch64.rpm", "freerdp-devel-2.11.7-1.oe2203sp2.aarch64.rpm", "libwinpr-devel-2.11.7-1.oe2203sp2.aarch64.rpm", "freerdp-debuginfo-2.11.7-1.oe2203sp2.aarch64.rpm", "freerdp-2.11.7-1.oe2203sp2.aarch64.rpm", "freerdp-help-2.11.7-1.oe2203sp2.aarch64.rpm" ], "src": [ "freerdp-2.11.7-1.oe2203sp2.src.rpm" ], "x86_64": [ "libwinpr-devel-2.11.7-1.oe2203sp2.x86_64.rpm", "freerdp-help-2.11.7-1.oe2203sp2.x86_64.rpm", "freerdp-2.11.7-1.oe2203sp2.x86_64.rpm", "freerdp-debuginfo-2.11.7-1.oe2203sp2.x86_64.rpm", "freerdp-devel-2.11.7-1.oe2203sp2.x86_64.rpm", "freerdp-debugsource-2.11.7-1.oe2203sp2.x86_64.rpm", "libwinpr-2.11.7-1.oe2203sp2.x86_64.rpm" ] }
{ "aarch64": [ "freerdp-help-2.11.7-1.oe2203sp3.aarch64.rpm", "freerdp-debugsource-2.11.7-1.oe2203sp3.aarch64.rpm", "libwinpr-2.11.7-1.oe2203sp3.aarch64.rpm", "freerdp-debuginfo-2.11.7-1.oe2203sp3.aarch64.rpm", "freerdp-2.11.7-1.oe2203sp3.aarch64.rpm", "freerdp-devel-2.11.7-1.oe2203sp3.aarch64.rpm", "libwinpr-devel-2.11.7-1.oe2203sp3.aarch64.rpm" ], "src": [ "freerdp-2.11.7-1.oe2203sp3.src.rpm" ], "x86_64": [ "freerdp-debugsource-2.11.7-1.oe2203sp3.x86_64.rpm", "freerdp-devel-2.11.7-1.oe2203sp3.x86_64.rpm", "freerdp-help-2.11.7-1.oe2203sp3.x86_64.rpm", "freerdp-2.11.7-1.oe2203sp3.x86_64.rpm", "freerdp-debuginfo-2.11.7-1.oe2203sp3.x86_64.rpm", "libwinpr-devel-2.11.7-1.oe2203sp3.x86_64.rpm", "libwinpr-2.11.7-1.oe2203sp3.x86_64.rpm" ] }