==========================================================================
Ubuntu Security Notice USN-6749-1
April 24, 2024<\/p>\n
freerdp2 vulnerabilities
==========================================================================<\/p>\n
A security issue affects these releases of Ubuntu and its derivatives:<\/p>\n
– Ubuntu 23.10
– Ubuntu 22.04 LTS
– Ubuntu 20.04 LTS<\/p>\n
Summary:<\/p>\n
Several security issues were fixed in FreeRDP.<\/p>\n
Software Description:
– freerdp2: RDP client for Windows Terminal Services<\/p>\n
Details:<\/p>\n
It was discovered that FreeRDP incorrectly handled certain context resets.
If a user were tricked into connecting to a malicious server, a remote
attacker could use this issue to cause FreeRDP to crash, resulting in a
denial of service, or possibly execute arbitrary code. (CVE-2024-22211)<\/p>\n
Evgeny Legerov discovered that FreeRDP incorrectly handled certain memory
operations. If a user were tricked into connecting to a malicious server, a
remote attacker could use this issue to cause FreeRDP to crash, resulting
in a denial of service, or possibly execute arbitrary code.
(CVE-2024-32039, CVE-2024-32040)<\/p>\n
Evgeny Legerov discovered that FreeRDP incorrectly handled certain memory
operations. If a user were tricked into connecting to a malicious server, a
remote attacker could possibly use this issue to cause FreeRDP to crash,
resulting in a denial of service. (CVE-2024-32041, CVE-2024-32458,
CVE-2024-32460)<\/p>\n
Evgeny Legerov discovered that FreeRDP incorrectly handled certain memory
operations. A remote attacker could possibly use this issue to cause
FreeRDP clients and servers to crash, resulting in a denial of service.
(CVE-2024-32459)<\/p>\n
Update instructions:<\/p>\n
The problem can be corrected by updating your system to the following
package versions:<\/p>\n
Ubuntu 23.10:
libfreerdp2-2 2.10.0+dfsg1-1.1ubuntu1.2<\/p>\n
Ubuntu 22.04 LTS:
libfreerdp2-2 2.6.1+dfsg1-3ubuntu2.6<\/p>\n
Ubuntu 20.04 LTS:
libfreerdp2-2 2.6.1+dfsg1-0ubuntu0.20.04.1<\/p>\n
After a standard system update you need to restart your session to make all
the necessary changes.<\/p>\n
References:
https:\/\/ubuntu.com\/security\/notices\/USN-6749-1
CVE-2024-22211, CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
CVE-2024-32458, CVE-2024-32459, CVE-2024-32460<\/p>\n
Package Information:
https:\/\/launchpad.net\/ubuntu\/+source\/freerdp2\/2.10.0+dfsg1-1.1ubuntu1.2
https:\/\/launchpad.net\/ubuntu\/+source\/freerdp2\/2.6.1+dfsg1-3ubuntu2.6
https:\/\/launchpad.net\/ubuntu\/+source\/freerdp2\/2.6.1+dfsg1-0ubuntu0.20.04.1<\/p>\n","protected":false},"excerpt":{"rendered":"
==========================================================================Ubuntu Security Notice USN-6749-1April 24, 2024 freerdp2 vulnerabilities========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 23.10– Ubuntu 22.04 LTS– Ubuntu 20.04 LTS Summary: Several security issues were fixed in FreeRDP. Software Description:– freerdp2: RDP client for Windows Terminal Services Details: It was discovered that FreeRDP incorrectly handled certain context …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-56466","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/56466","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=56466"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/56466\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=56466"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=56466"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=56466"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}