Test ID:	1.3.6.1.4.1.25623.1.0.126728
Category:	General
Title:	FreeRDP < 3.5.1 Multiple Vulnerabilities
Summary:	FreeRDP is prone to multiple vulnerabilities.
Description:	Summary: FreeRDP is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2024-32658: FreeRDP allows to out-of-bounds read in ExtractRunLengthRegular*. - CVE-2024-32659: FreeRDP allows to out-of-bounds read in freerdp_image_copy if nWidth is 0 and nHeight is 0. - CVE-2024-32660: It is possible for malicious server to crash the FreeRDP client by sending invalid huge allocation size. - CVE-2024-32661: FreeRDP allows to a possible 'NULL' access and crash in rdp_redirection_read_base64_wchar. - CVE-2024-32662: FreeRDP allows to out-of-bounds read in ncrush_decompress. This occurs when `WCHAR` string is read with twice the size it has and converted to 'UTF-8', 'base64' decoded. The string is only used to compare against the redirection server certificate. Affected Software/OS: FreeRDP prior to version 3.5.1. Solution: Update to version 3.5.1 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-32658 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7SIS6NUNLUBOV4CPCSWKDE6T6C2W3WTR/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKI4UISUXYNBPN4K6TIQKDRTIJ6CDCKJ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5JL476WVJSIE7SBUKVJRVA6A52V2HOLZ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PX3U6YPZQ7PEJBVKSBUOLWVH7DHROHY5/ https://github.com/FreeRDP/FreeRDP/commit/1a755d898ddc028cc818d0dd9d49d5acff4c44bf https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vpv3-m3m9-4c2v https://oss-fuzz.com/testcase-detail/4852534033317888 https://oss-fuzz.com/testcase-detail/6196819496337408 Common Vulnerability Exposure (CVE) ID: CVE-2024-32659 https://github.com/FreeRDP/FreeRDP/commit/6430945ce003a5e24d454d8566f54aae1b6b617b https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8jgr-7r33-x87w https://oss-fuzz.com/testcase-detail/6156779722440704 Common Vulnerability Exposure (CVE) ID: CVE-2024-32660 https://github.com/FreeRDP/FreeRDP/commit/5e5d27cf310e4c10b854be7667bfb7a5d774eb47 https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mxv6-2cw6-m3mx https://oss-fuzz.com/testcase-detail/5559242514825216 Common Vulnerability Exposure (CVE) ID: CVE-2024-32661 https://github.com/FreeRDP/FreeRDP/commit/71e463e31b4d69f4022d36bfc814592f56600793 https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-p5m5-342g-pv9m Common Vulnerability Exposure (CVE) ID: CVE-2024-32662 https://github.com/FreeRDP/FreeRDP/commit/626d10a94a88565d957ddc30768ed08b320049a7 https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vffh-j6hh-95f4 https://oss-fuzz.com/testcase-detail/4985227207311360
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.