Vulnerability CVE-2024-32040: Information
Description
FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 and have connections to servers using the `NSC` codec are vulnerable to integer underflow. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, do not use the NSC codec (e.g. use `-nsc`).
Published: April 23, 2024
Modified: June 10, 2024
Fixed packages
Package name | Branch | Fixed in version | Version from repository | Errata ID | Task # | State |
|---|---|---|---|---|---|---|
| freerdp | sisyphus | 2.11.6-alt1 | 2.11.7-alt2 | ALT-PU-2024-6814-1 | 345418 | Fixed |
| freerdp | sisyphus_e2k | 2.11.7-alt1.1 | 2.11.7-alt2 | ALT-PU-2024-7151-1 | - | Fixed |
| freerdp | sisyphus_riscv64 | 2.11.6-alt1 | 2.11.7-alt2 | ALT-PU-2024-6834-1 | - | Fixed |
| freerdp | sisyphus_loongarch64 | 2.11.6-alt1 | 2.11.7-alt2 | ALT-PU-2024-6841-1 | - | Fixed |
| freerdp | p10 | 2.11.6-alt1 | 2.11.7-alt2 | ALT-PU-2024-6851-2 | 345435 | Fixed |
| freerdp | p10_e2k | 2.11.6-alt1 | 2.11.7-alt2 | ALT-PU-2024-7154-1 | - | Fixed |
| freerdp | c10f1 | 2.11.6-alt1 | 2.11.6-alt1 | ALT-PU-2024-6898-2 | 345436 | Fixed |
| freerdp | c9f2 | 2.11.6-alt1 | 2.11.6-alt1 | ALT-PU-2024-6847-2 | 345438 | Fixed |
| freerdp | p11 | 2.11.6-alt1 | 2.11.7-alt2 | ALT-PU-2024-6814-1 | 345418 | Fixed |
| freerdp3 | sisyphus | 3.5.0-alt1 | 3.5.1-alt1 | ALT-PU-2024-6812-1 | 345417 | Fixed |
| freerdp3 | sisyphus_riscv64 | 3.5.0-alt1 | 3.5.1-alt1 | ALT-PU-2024-6832-1 | - | Fixed |
| freerdp3 | sisyphus_loongarch64 | 3.5.0-alt1 | 3.5.1-alt1 | ALT-PU-2024-6840-1 | - | Fixed |
| freerdp3 | p10 | 3.5.0-alt1 | 3.5.0-alt1 | ALT-PU-2024-6812-1 | 345417 | Fixed |
| freerdp3 | p11 | 3.5.0-alt1 | 3.5.1-alt1 | ALT-PU-2024-6812-1 | 345417 | Fixed |