SUSE: CVE-2024-32659: SUSE Linux Security Advisory

SUSE: CVE-2024-32659: SUSE Linux Security Advisory

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

04/23/2024

Created

05/31/2024

Added

05/30/2024

Modified

02/06/2025

Description

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read if `((nWidth == 0) and (nHeight == 0))`. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

Solution(s)

• suse-upgrade-freerdp
• suse-upgrade-freerdp-devel
• suse-upgrade-freerdp-proxy
• suse-upgrade-freerdp-server
• suse-upgrade-freerdp-wayland
• suse-upgrade-libfreerdp2
• suse-upgrade-libfreerdp2-2
• suse-upgrade-libuwac0-0
• suse-upgrade-libwinpr2
• suse-upgrade-libwinpr2-2
• suse-upgrade-uwac0-0-devel
• suse-upgrade-winpr-devel
• suse-upgrade-winpr2-devel

References

• https://attackerkb.com/topics/cve-2024-32659
• CVE - 2024-32659