Out-of-Bounds Read Vulnerability in FreeRDP3: Critical Security Flaw
Summary
DEBIAN-CVE-2024-32662: FreeRDP is a free implementation of the Remote Desktop Protocol. Affects freerdp3 versions < 3.5.1+dfsg1-1. Fixed in 3.5.1+dfsg1-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), allowing users to connect to remote computers. It is widely used for remote desktop access across various platforms. The package is known for its flexibility and support for multiple RDP features. However, prior to version 3.5.1, FreeRDP3 is susceptible to a serious out-of-bounds read vulnerability that can compromise the security of remote connections.
Vulnerability Detail
The vulnerability arises from an out-of-bounds read when a WCHAR string is read with double its actual size and converted to UTF-8, followed by base64 decoding. This flaw can lead to unintended memory access, potentially exposing sensitive information or causing application crashes. The vulnerability affects FreeRDP3 clients prior to version 3.5.1, which contains a patch to address this issue. Without proper mitigation, attackers could exploit this vulnerability to manipulate remote desktop sessions.
How To Fix
Minimum fixed version
3.5.1+dfsg1-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade freerdp3Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No known workarounds are available for this vulnerability. The best course of action is to update to the patched version as soon as possible.
Conclusion
The out-of-bounds read vulnerability in FreeRDP3 poses a significant risk to users relying on this remote desktop solution. Immediate action is required to update to the patched version to safeguard against potential exploits. Regular monitoring for vulnerabilities using tools like Vulert can enhance security posture.
See every vulnerability recorded for freerdp3 →
FAQ
FreeRDP is an open-source implementation of the Remote Desktop Protocol, enabling users to connect to remote desktops and servers.
It involves reading memory beyond the allocated buffer size, which can lead to information leakage or application instability.
You can use Vulert's playground at Vulert Scanner to check if your application is impacted by this vulnerability without needing to sign up.
Yes, the vulnerability is patched in version 3.5.1+dfsg1-1 of FreeRDP3.
While no workarounds are available, it is crucial to prioritize updating to the patched version to maintain security.
References
Related vulnerabilities
Recent vulnerabilities recorded for freerdp3.
