Log in Start free

Vulnerability · Published Jan 19, 2024 · Assigned by GitHub_M

CVE-2024-22211FreeRDP integer Overflow leading to Heap Overflow

Low 3.7

In plain English

A low-severity integer overflow in FreeRDP from FreeRDP. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)3.7Low
Exploit odds (30 days)1.1%top 34.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in `freerdp_bitmap_planar_context_reset` leads to heap-buffer overflow. This affects FreeRDP based clients. FreeRDP based server implementations and proxy are not affected. A malicious server could prepare a `RDPGFX_RESET_GRAPHICS_PDU` to allocate too small buffers, possibly triggering later out of bound read/write. Data extraction over network is not possible, the buffers are used to display an image. This issue has been addressed in version 2.11.5 and 3.2.0. Users are advised to upgrade. there are no know workarounds for this vulnerability.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20freerdp2.11.5-r0ALPINE-CVE-2024-22211
Alpine:v3.21freerdp2.11.5-r0ALPINE-CVE-2024-22211
Alpine:v3.22freerdp2.11.5-r0ALPINE-CVE-2024-22211
Alpine:v3.23freerdp2.11.5-r0ALPINE-CVE-2024-22211
Alpine:v3.24freerdp2.11.5-r0ALPINE-CVE-2024-22211
Alpine:v3.22freerdp22.11.5-r0ALPINE-CVE-2024-22211
Alpine:v3.23freerdp22.11.5-r0ALPINE-CVE-2024-22211
Alpine:v3.24freerdp22.11.5-r0ALPINE-CVE-2024-22211
Debian:12freerdp22.11.7+dfsg1-6~deb12u1DEBIAN-CVE-2024-22211
Ubuntu:22.04:LTSfreerdp22.6.1+dfsg1-3ubuntu2.6UBUNTU-CVE-2024-22211
Ubuntu:22.04:LTSfreerdp22.6.1+dfsg1-3ubuntu2.6USN-6749-1

Affected products (as reported)

VendorProductVersions
FreeRDP FreeRDP < 2.11.5>= 3.0.0, < 3.2.0

Weakness: CWE-190, CWE-122 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:L

References