CVE catalog

CVE-2024-32658

FreeRDP vulnerabilities

[CVE catalog]

Severity
High · CVSS 8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
1.36% · Oct 25, 2026

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. Version 3.5.1 contains a patch for the issue. No known workarounds are available. FreeRDP: ExtractRunLengthRegular* out of bound read The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianfreerdp2bookworm2.11.7+dfsg1-6~deb12u1fixed
Ubuntufreerdp2noble2.11.5+dfsg1-1ubuntu0.1~esm1fixed
Ubuntufreerdp2-devnoble2.11.5+dfsg1-1ubuntu0.1~esm1fixed
Ubuntufreerdp2-shadow-x11noble2.11.5+dfsg1-1ubuntu0.1~esm1fixed
Ubuntufreerdp2-waylandnoble2.11.5+dfsg1-1ubuntu0.1~esm1fixed
Ubuntufreerdp2-x11noble2.11.5+dfsg1-1ubuntu0.1~esm1fixed
Ubuntulibfreerdp-client2-2t64noble2.11.5+dfsg1-1ubuntu0.1~esm1fixed
Ubuntulibfreerdp-server2-2t64noble2.11.5+dfsg1-1ubuntu0.1~esm1fixed
Ubuntulibfreerdp-shadow-subsystem2-2t64noble2.11.5+dfsg1-1ubuntu0.1~esm1fixed
Ubuntulibfreerdp-shadow2-2t64noble2.11.5+dfsg1-1ubuntu0.1~esm1fixed
Ubuntulibfreerdp2-2t64noble2.11.5+dfsg1-1ubuntu0.1~esm1fixed
Ubuntulibuwac0-0t64noble2.11.5+dfsg1-1ubuntu0.1~esm1fixed
Ubuntulibuwac0-devnoble2.11.5+dfsg1-1ubuntu0.1~esm1fixed
Ubuntulibwinpr-tools2-2t64noble2.11.5+dfsg1-1ubuntu0.1~esm1fixed
Ubuntulibwinpr2-2t64noble2.11.5+dfsg1-1ubuntu0.1~esm1fixed
Ubuntulibwinpr2-devnoble2.11.5+dfsg1-1ubuntu0.1~esm1fixed
Ubuntuwinpr-utilsnoble2.11.5+dfsg1-1ubuntu0.1~esm1fixed
Ubuntufreerdp3noble3.5.1+dfsg1-0ubuntu1fixed
Ubuntufreerdp3-devnoble3.5.1+dfsg1-0ubuntu1fixed
Ubuntufreerdp3-shadow-x11noble3.5.1+dfsg1-0ubuntu1fixed
Ubuntufreerdp3-waylandnoble3.5.1+dfsg1-0ubuntu1fixed
Ubuntufreerdp3-x11noble3.5.1+dfsg1-0ubuntu1fixed
Ubuntulibfreerdp-client3-3noble3.5.1+dfsg1-0ubuntu1fixed
Ubuntulibfreerdp-server3-3noble3.5.1+dfsg1-0ubuntu1fixed
Ubuntulibfreerdp-shadow-subsystem3-3noble3.5.1+dfsg1-0ubuntu1fixed
Ubuntulibfreerdp-shadow3-3noble3.5.1+dfsg1-0ubuntu1fixed
Ubuntulibfreerdp3-3noble3.5.1+dfsg1-0ubuntu1fixed
Ubuntulibwinpr-tools3-3noble3.5.1+dfsg1-0ubuntu1fixed
Ubuntulibwinpr3-3noble3.5.1+dfsg1-0ubuntu1fixed
Ubuntulibwinpr3-devnoble3.5.1+dfsg1-0ubuntu1fixed
Ubuntuwinpr3-utilsnoble3.5.1+dfsg1-0ubuntu1fixed
Ubuntufreerdp16.041.1.0~git20140921.1.440916e+dfsg1-5ubuntu1vulnerable
Ubuntufreerdp16.041.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2vulnerable
Ubuntufreerdp16.041.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.3vulnerable
Ubuntufreerdp16.041.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4vulnerable
Ubuntufreerdp2pro2.10.0+dfsg1-1.1ubuntu1vulnerable
Ubuntufreerdp2pro2.11.2+dfsg1-1vulnerable
Ubuntufreerdp2pro2.11.2+dfsg1-1build1vulnerable
Ubuntufreerdp2pro2.11.2+dfsg1-1build3vulnerable
Ubuntufreerdp2pro2.11.5+dfsg1-1build1vulnerable
Ubuntufreerdp2pro2.11.5+dfsg1-1build2vulnerable
Ubuntufreerdp2pro2.11.5+dfsg1-1ubuntu0.1~esm1fixed
Ubuntufreerdp18.041.1.0~git20140921.1.440916e+dfsg1-15ubuntu1vulnerable
Ubuntufreerdp18.041.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1vulnerable
Ubuntufreerdp18.041.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2vulnerable
Ubuntufreerdp220.042.0.0~git20190204.1.2693389a+dfsg1-1vulnerable
Ubuntufreerdp220.042.0.0~git20190204.1.2693389a+dfsg1-2vulnerable
Ubuntufreerdp220.042.0.0~git20190204.1.2693389a+dfsg1-2build1vulnerable
Ubuntufreerdp220.042.0.0~git20190204.1.2693389a+dfsg1-2build2vulnerable
Ubuntufreerdp220.042.1.1+dfsg1-0ubuntu0.20.04.1vulnerable
Ubuntufreerdp220.042.2.0+dfsg1-0ubuntu0.20.04.1vulnerable
Ubuntufreerdp220.042.2.0+dfsg1-0ubuntu0.20.04.2vulnerable
Ubuntufreerdp220.042.2.0+dfsg1-0ubuntu0.20.04.3vulnerable
Ubuntufreerdp220.042.2.0+dfsg1-0ubuntu0.20.04.4vulnerable
Ubuntufreerdp220.042.2.0+dfsg1-0ubuntu0.20.04.5vulnerable
Ubuntufreerdp220.042.2.0+dfsg1-0ubuntu0.20.04.6vulnerable
Ubuntufreerdp220.042.6.1+dfsg1-0ubuntu0.20.04.1vulnerable
Ubuntufreerdp220.042.6.1+dfsg1-0ubuntu0.20.04.2fixed
Ubuntufreerdp222.042.3.0+dfsg1-2build1vulnerable
Ubuntufreerdp222.042.3.0+dfsg1-2ubuntu1vulnerable
Ubuntufreerdp222.042.3.0+dfsg1-2ubuntu2vulnerable
Ubuntufreerdp222.042.4.1+dfsg1-1vulnerable
Ubuntufreerdp222.042.4.1+dfsg1-1ubuntu1vulnerable
Ubuntufreerdp222.042.4.1+dfsg1-1ubuntu2vulnerable
Ubuntufreerdp222.042.5.0+dfsg1-1vulnerable
Ubuntufreerdp222.042.6.0+dfsg1-1vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-1vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3ubuntu1vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3ubuntu2vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3ubuntu2.1vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3ubuntu2.2vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3ubuntu2.3vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3ubuntu2.4vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3ubuntu2.5vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3ubuntu2.6vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3ubuntu2.7fixed
Ubuntufreerdp324.043.4.0+dfsg1-0ubuntu2vulnerable
Ubuntufreerdp324.043.4.0+dfsg1-0ubuntu3vulnerable
Ubuntufreerdp324.043.4.0+dfsg1-0ubuntu4vulnerable
Ubuntufreerdp324.043.5.0+dfsg1-0ubuntu1vulnerable
Ubuntufreerdp324.043.5.1+dfsg1-0ubuntu1fixed
Ubuntufreerdp324.043.4.0+dfsg1-0ubuntu2vulnerable
Ubuntufreerdp324.043.4.0+dfsg1-0ubuntu3vulnerable
Ubuntufreerdp324.043.4.0+dfsg1-0ubuntu4vulnerable
Ubuntufreerdp324.043.5.0+dfsg1-0ubuntu1vulnerable
Ubuntufreerdp324.043.5.1+dfsg1-0ubuntu1fixed
Ubuntufreerdp220.042.0.0~git20190204.1.2693389a+dfsg1-1vulnerable
Ubuntufreerdp220.042.0.0~git20190204.1.2693389a+dfsg1-2vulnerable
Ubuntufreerdp220.042.0.0~git20190204.1.2693389a+dfsg1-2build1vulnerable
Ubuntufreerdp220.042.0.0~git20190204.1.2693389a+dfsg1-2build2vulnerable
Ubuntufreerdp220.042.1.1+dfsg1-0ubuntu0.20.04.1vulnerable
Ubuntufreerdp220.042.2.0+dfsg1-0ubuntu0.20.04.1vulnerable
Ubuntufreerdp220.042.2.0+dfsg1-0ubuntu0.20.04.2vulnerable
Ubuntufreerdp220.042.2.0+dfsg1-0ubuntu0.20.04.3vulnerable
Ubuntufreerdp220.042.2.0+dfsg1-0ubuntu0.20.04.4vulnerable
Ubuntufreerdp220.042.2.0+dfsg1-0ubuntu0.20.04.5vulnerable
Ubuntufreerdp220.042.2.0+dfsg1-0ubuntu0.20.04.6vulnerable
Ubuntufreerdp220.042.6.1+dfsg1-0ubuntu0.20.04.1vulnerable
Ubuntufreerdp220.042.6.1+dfsg1-0ubuntu0.20.04.2fixed
Ubuntufreerdp222.042.3.0+dfsg1-2build1vulnerable
Ubuntufreerdp222.042.3.0+dfsg1-2ubuntu1vulnerable
Ubuntufreerdp222.042.3.0+dfsg1-2ubuntu2vulnerable
Ubuntufreerdp222.042.4.1+dfsg1-1vulnerable
Ubuntufreerdp222.042.4.1+dfsg1-1ubuntu1vulnerable
Ubuntufreerdp222.042.4.1+dfsg1-1ubuntu2vulnerable
Ubuntufreerdp222.042.5.0+dfsg1-1vulnerable
Ubuntufreerdp222.042.6.0+dfsg1-1vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-1vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3ubuntu1vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3ubuntu2vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3ubuntu2.1vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3ubuntu2.2vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3ubuntu2.3vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3ubuntu2.4vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3ubuntu2.5vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3ubuntu2.6vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3ubuntu2.7fixed
Opensusefreerdp2tumbleweed2.11.5-3.1fixed
Susefreerdplinux enterprise software development kit 12 sp52.1.2-12.47.1fixed
Susefreerdplinux enterprise workstation extension 12 sp52.1.2-12.47.1fixed
Susefreerdplinux enterprise module for package hub 15 sp52.4.0-150400.3.32.1fixed
Susefreerdplinux enterprise module for package hub 15 sp62.4.0-150400.3.32.1fixed
Susefreerdplinux enterprise workstation extension 15 sp52.4.0-150400.3.32.1fixed
Opensusefreerdpleap 15.52.4.0-150400.3.32.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianfreerdp2sourcebookworm2.11.7+dfsg1-6~deb12u1not yet assignedNot reported[1072112]
Ubuntufreerdp2debnoble2.11.5+dfsg1-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntufreerdp2-devdebnoble2.11.5+dfsg1-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntufreerdp2-shadow-x11debnoble2.11.5+dfsg1-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntufreerdp2-waylanddebnoble2.11.5+dfsg1-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntufreerdp2-x11debnoble2.11.5+dfsg1-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntulibfreerdp-client2-2t64debnoble2.11.5+dfsg1-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntulibfreerdp-server2-2t64debnoble2.11.5+dfsg1-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntulibfreerdp-shadow-subsystem2-2t64debnoble2.11.5+dfsg1-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntulibfreerdp-shadow2-2t64debnoble2.11.5+dfsg1-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntulibfreerdp2-2t64debnoble2.11.5+dfsg1-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntulibuwac0-0t64debnoble2.11.5+dfsg1-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntulibuwac0-devdebnoble2.11.5+dfsg1-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntulibwinpr-tools2-2t64debnoble2.11.5+dfsg1-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntulibwinpr2-2t64debnoble2.11.5+dfsg1-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntulibwinpr2-devdebnoble2.11.5+dfsg1-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntuwinpr-utilsdebnoble2.11.5+dfsg1-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntufreerdp3debnoble3.5.1+dfsg1-0ubuntu1Not reportedNot reportedNot reported
Ubuntufreerdp3-devdebnoble3.5.1+dfsg1-0ubuntu1Not reportedNot reportedNot reported
Ubuntufreerdp3-shadow-x11debnoble3.5.1+dfsg1-0ubuntu1Not reportedNot reportedNot reported
Ubuntufreerdp3-waylanddebnoble3.5.1+dfsg1-0ubuntu1Not reportedNot reportedNot reported
Ubuntufreerdp3-x11debnoble3.5.1+dfsg1-0ubuntu1Not reportedNot reportedNot reported
Ubuntulibfreerdp-client3-3debnoble3.5.1+dfsg1-0ubuntu1Not reportedNot reportedNot reported
Ubuntulibfreerdp-server3-3debnoble3.5.1+dfsg1-0ubuntu1Not reportedNot reportedNot reported
Ubuntulibfreerdp-shadow-subsystem3-3debnoble3.5.1+dfsg1-0ubuntu1Not reportedNot reportedNot reported
Ubuntulibfreerdp-shadow3-3debnoble3.5.1+dfsg1-0ubuntu1Not reportedNot reportedNot reported
Ubuntulibfreerdp3-3debnoble3.5.1+dfsg1-0ubuntu1Not reportedNot reportedNot reported
Ubuntulibwinpr-tools3-3debnoble3.5.1+dfsg1-0ubuntu1Not reportedNot reportedNot reported
Ubuntulibwinpr3-3debnoble3.5.1+dfsg1-0ubuntu1Not reportedNot reportedNot reported
Ubuntulibwinpr3-devdebnoble3.5.1+dfsg1-0ubuntu1Not reportedNot reportedNot reported
Ubuntuwinpr3-utilsdebnoble3.5.1+dfsg1-0ubuntu1Not reportedNot reportedNot reported
Ubuntufreerdp2debpro2.11.5+dfsg1-1ubuntu0.1~esm1Not reportedUBUNTU-CVE-2024-32658Not reported
Ubuntufreerdp2deb20.042.6.1+dfsg1-0ubuntu0.20.04.2Not reportedUBUNTU-CVE-2024-32658Not reported
Ubuntufreerdp2deb22.042.6.1+dfsg1-3ubuntu2.7Not reportedUBUNTU-CVE-2024-32658Not reported
Ubuntufreerdp3deb24.043.5.1+dfsg1-0ubuntu1Not reportedUBUNTU-CVE-2024-32658Not reported
Ubuntufreerdp3deb24.043.5.1+dfsg1-0ubuntu1Not reportedUSN-6759-1Not reported
Ubuntufreerdp2deb20.042.6.1+dfsg1-0ubuntu0.20.04.2Not reportedUSN-6752-1Not reported
Ubuntufreerdp2deb22.042.6.1+dfsg1-3ubuntu2.7Not reportedUSN-6752-1Not reported
Opensusefreerdp2rpmtumbleweed2.11.5-3.1Not reportedOPENSUSE-SU-2024:13994-1Not reported
Susefreerdprpmlinux enterprise software development kit 12 sp52.1.2-12.47.1Not reportedSUSE-SU-2024:1835-1Not reported
Susefreerdprpmlinux enterprise workstation extension 12 sp52.1.2-12.47.1Not reportedSUSE-SU-2024:1835-1Not reported
Susefreerdprpmlinux enterprise module for package hub 15 sp52.4.0-150400.3.32.1Not reportedSUSE-SU-2024:1856-1Not reported
Susefreerdprpmlinux enterprise module for package hub 15 sp62.4.0-150400.3.32.1Not reportedSUSE-SU-2024:1856-1Not reported
Susefreerdprpmlinux enterprise workstation extension 15 sp52.4.0-150400.3.32.1Not reportedSUSE-SU-2024:1856-1Not reported
Opensusefreerdprpmleap 15.52.4.0-150400.3.32.1Not reportedSUSE-SU-2024:1856-1Not reported

[Debian bug #1072112]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References