FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.5.1, a malicious server can crash the FreeRDP client by sending invalid huge allocation size. Version 3.5.1 contains a patch for the issue. No known workarounds are available.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade freerdp-debuginfoUpgrade freerdp-develUpgrade libwinpr-develUpgrade freerdp-libsUpgrade freerdpUpgrade libwinpr | Jun 11, 2024 | Apr 23, 2024 |
| Debian | — | Upgrade freerdp3Upgrade freerdp2 | Feb 17, 2025 | Apr 23, 2024 |
| Oracle_linux | — | Upgrade freerdpUpgrade libwinpr-develUpgrade libwinprUpgrade freerdp-libsUpgrade freerdp-devel | Nov 21, 2024 | Apr 23, 2024 |
| Redhat_linux | — | Upgrade freerdp-libsUpgrade freerdp-debugsourceUpgrade libwinpr-develUpgrade freerdp-libs-debuginfoUpgrade libwinprUpgrade libwinpr-debuginfoUpgrade freerdp-develUpgrade freerdp-debuginfoNo solution existsUpgrade freerdp | Nov 13, 2024 | Apr 23, 2024 |
| Rocky_linux | — | Upgrade freerdp-debugsourceUpgrade freerdpUpgrade freerdp-debuginfoUpgrade libwinpr-develUpgrade freerdp-libs-debuginfoUpgrade libwinpr-debuginfoUpgrade libwinprUpgrade freerdp-develUpgrade freerdp-libs | Mar 18, 2025 | Apr 23, 2024 |
| Suse | — | Upgrade freerdp-serverUpgrade winpr-develUpgrade libwinpr2-2Upgrade freerdp-develUpgrade libfreerdp2-2Upgrade libfreerdp2Upgrade freerdp-proxyUpgrade freerdp-waylandUpgrade winpr2-develUpgrade libwinpr2Upgrade libuwac0-0Upgrade uwac0-0-develUpgrade freerdp | May 30, 2024 | Apr 23, 2024 |
| Ubuntu | — | Upgrade libfreerdp-client2-2t64 (Ubuntu Pro)Upgrade libfreerdp2-2t64 (Ubuntu Pro)Upgrade libfreerdp-server2-2t64 (Ubuntu Pro)Upgrade libfreerdp3-3Upgrade libfreerdp2-2 | Apr 26, 2024 | Apr 23, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub