USN-6759-1: FreeRDP vulnerabilities

Releases

• Ubuntu 24.04 LTS

Packages

• freerdp3 - RDP client for Windows Terminal Services

Details

It was discovered that FreeRDP incorrectly handled certain memory
operations. If a user were tricked into connecting to a malicious server, a
remote attacker could possibly use this issue to cause FreeRDP to crash,
resulting in a denial of service.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 24.04

• libfreerdp3-3 - 3.5.1+dfsg1-0ubuntu1

After a standard system update you need to restart your session to make all
the necessary changes.

References

• CVE-2024-32658
• CVE-2024-32660
• CVE-2024-32661
• CVE-2024-32659
• CVE-2024-32662

Related notices

• USN-6752-1: libfreerdp-shadow2-2, libuwac0-0, libfreerdp2-2, libuwac0-dev, freerdp2, libfreerdp-server2-2, libfreerdp-shadow-subsystem2-2, libwinpr-tools2-2, freerdp2-dev, freerdp2-shadow-x11, winpr-utils, libfreerdp-client2-2, freerdp2-x11, libwinpr2-dev, freerdp2-wayland, libwinpr2-2