net-misc/freerdp-3.32.1 — Security Advisories

▸ GLSA 202401-16 FreeRDP: Multiple Vulnerabilities this version unaffected normal remote 2024-01-12

Multiple vulnerabilities have been discovered in FreeRDP, the worst of which could result in code execution.

Announced: 2024-01-12
Revised: 2024-01-12
Access: remote
Bugs: #881525 #918546
Advisory: https://security.gentoo.org/glsa/202401-16

Affected packages

Package	Arch	Vulnerable	Unaffected
net-misc/freerdp	*	< 2.11.0	>= 2.11.0

Background

FreeRDP is a free implementation of the remote desktop protocol.

Description

Multiple vulnerabilities have been discovered in FreeRDP. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All FreeRDP users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-misc/freerdp-2.11.0"

References

▸ GLSA 202210-24 FreeRDP: Multiple Vulnerabilities this version unaffected normal remote 2022-10-31

Multiple vulnerabilities have been found in FreeRDP, the worst of which could result in remote code execution.

Announced: 2022-10-31
Revised: 2022-10-31
Access: remote
Bugs: #876905 #842231 #819534
Advisory: https://security.gentoo.org/glsa/202210-24

Affected packages

Package	Arch	Vulnerable	Unaffected
net-misc/freerdp	*	< 2.8.1	>= 2.8.1

Background

FreeRDP is a free implementation of the remote desktop protocol.

Description

Multiple vulnerabilities have been discovered in FreeRDP. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All FreeRDP users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-misc/freerdp-2.8.1"

References

▸ GLSA 202005-07 FreeRDP: Multiple vulnerabilities this version unaffected normal remote 2020-05-14

Multiple vulnerabilities have been found in FreeRDP, the worst of which could result in a Denial of Service condition.

Announced: 2020-05-14
Revised: 2020-05-14
Access: remote
Bugs: #716830
Advisory: https://security.gentoo.org/glsa/202005-07

Affected packages

Package	Arch	Vulnerable	Unaffected
net-misc/freerdp	*	< 2.1.0	>= 2.1.0

Background

FreeRDP is a free implementation of the Remote Desktop Protocol.

Description

Multiple vulnerabilities have been discovered in FreeRDP. Please review the CVE identifiers referenced below for details.

Impact

An attacker could possibly cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All FreeRDP users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-misc/freerdp-2.1.0"

References

▸ GLSA 201412-18 FreeRDP: User-assisted execution of arbitrary code this version unaffected normal remote 2014-12-13

An integer overflow in FreeRDP couuld result in execution of arbitrary code or Denial of Service.

Announced: 2014-12-13
Revised: 2014-12-13
Access: remote
Bugs: #511688
Advisory: https://security.gentoo.org/glsa/201412-18

Affected packages

Package	Arch	Vulnerable	Unaffected
net-misc/freerdp	*	< 1.1.0_beta1_p20130710-r1	>= 1.1.0_beta1_p20130710-r1

Background

FreeRDP is a free implementation of the remote desktop protocol.

Description

FreeRDP does not properly validate user-supplied input, which could lead to an integer overflow in the xf_Pointer_New() function.

Impact

A remote attacker could execute arbitrary code with the privileges of the process or cause Denial of Service.

Workaround

There is no known workaround at this time.

Resolution

All FreeRDP users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=net-misc/freerdp-1.1.0_beta1_p20130710-r1"

References

CVE-2014-0250