FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.5.1, a malicious server can crash the FreeRDP client by sending invalid huge allocation size. Version 3.5.1 contains a patch for the issue. No known workarounds are available.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade freerdpUpgrade freerdp-develUpgrade freerdp-libsUpgrade freerdp-debuginfoUpgrade libwinpr-develUpgrade libwinpr | Jun 11, 2024 | Apr 23, 2024 |
| Debian | — | Upgrade freerdp3Upgrade freerdp2 | Feb 17, 2025 | Apr 23, 2024 |
| Oracle_linux | — | Upgrade freerdp-develUpgrade freerdp-libsUpgrade freerdpUpgrade libwinprUpgrade libwinpr-devel | Nov 21, 2024 | Apr 23, 2024 |
| Redhat_linux | — | No solution existsUpgrade freerdp-develUpgrade libwinpr-debuginfoUpgrade freerdp-debuginfoUpgrade libwinprUpgrade freerdpUpgrade freerdp-libsUpgrade freerdp-debugsourceUpgrade libwinpr-develUpgrade freerdp-libs-debuginfo | Nov 13, 2024 | Apr 23, 2024 |
| Rocky_linux | — | Upgrade libwinprUpgrade freerdp-develUpgrade freerdp-libsUpgrade freerdp-libs-debuginfoUpgrade libwinpr-debuginfoUpgrade freerdp-debuginfoUpgrade freerdp-debugsourceUpgrade freerdpUpgrade libwinpr-devel | Mar 18, 2025 | Apr 23, 2024 |
| Suse | — | Upgrade libwinpr2-2Upgrade libfreerdp2-2Upgrade freerdp-waylandUpgrade freerdp-proxyUpgrade freerdp-develUpgrade freerdp-serverUpgrade libfreerdp2Upgrade winpr-develUpgrade winpr2-develUpgrade libwinpr2Upgrade libuwac0-0Upgrade freerdpUpgrade uwac0-0-devel | May 30, 2024 | Apr 23, 2024 |
| Ubuntu | — | Upgrade libfreerdp2-2t64 (Ubuntu Pro)Upgrade libfreerdp-client2-2t64 (Ubuntu Pro)Upgrade libfreerdp2-2Upgrade libfreerdp3-3Upgrade libfreerdp-server2-2t64 (Ubuntu Pro) | Apr 26, 2024 | Apr 23, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub