Rapid7

vulnerability

Ubuntu: (Multiple Advisories) (CVE-2024-32659): FreeRDP vulnerabilities

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
Apr 23, 2024
Added
Apr 26, 2024
Modified
Apr 16, 2026

Description

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read if `((nWidth == 0) and (nHeight == 0))`. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

Solutions

ubuntu-pro-upgrade-libfreerdp-client2-2t64ubuntu-pro-upgrade-libfreerdp-server2-2t64ubuntu-pro-upgrade-libfreerdp2-2t64ubuntu-upgrade-libfreerdp2-2ubuntu-upgrade-libfreerdp3-3
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.