The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c702ea0fb1 advisory.

    Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459,     CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)




Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6752-1 advisory.

    It was discovered that FreeRDP incorrectly handled certain memory operations. If a user were tricked into     connecting to a malicious server, a remote attacker could possibly use this issue to cause FreeRDP to     crash, resulting in a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS. host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6759-1 advisory.

    It was discovered that FreeRDP incorrectly handled certain memory operations. If a user were tricked into     connecting to a malicious server, a remote attacker could possibly use this issue to cause FreeRDP to     crash, resulting in a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2631-1 advisory.

    - CVE-2024-22211: Fixed integer overflow in `freerdp_bitmap_planar_context_reset` that could lead to heap-     buffer overflow (bsc#1219049)
    - CVE-2024-32658: Fixed out-of-bounds read in Interleaved RLE Bitmap Codec in FreeRDP based clients     (bsc#1223353)
    - CVE-2024-32659: Fixed out-of-bounds read if `((nWidth == 0) and (nHeight == 0))` (bsc#1223346)
    - CVE-2024-32660: Fixed client crash via invalid huge allocation size (bsc#1223347)
    - CVE-2024-32661: Fixed client NULL pointer dereference (bsc#1223348)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version     3.5.1 are vulnerable to out-of-bounds read. Version 3.5.1 contains a patch for the issue. No known     workarounds are available. (CVE-2024-32658)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
195183	Fedora 38 : freerdp (2024-c702ea0fb1)	Nessus	Fedora Local Security Checks	2024/5/9	2026/2/24	critical
193891	Ubuntu 20.04 LTS / 22.04 LTS / 23.10 : FreeRDP vulnerabilities (USN-6752-1)	Nessus	Ubuntu Local Security Checks	2024/4/25	2025/2/5	critical
194731	Ubuntu 24.04 LTS. : FreeRDP vulnerabilities (USN-6759-1)	Nessus	Ubuntu Local Security Checks	2024/4/29	2025/2/5	critical
204882	SUSE SLED15: freerdp / freerdp-devel / freerdp-proxy / freerdp-server / etc (SUSE-SU-2024:2631-1)	Nessus	SuSE Local Security Checks	2024/7/31	2026/6/25	critical
228001	Linux Distros Unpatched Vulnerability : CVE-2024-32658	Nessus	Misc.	2025/3/5	2026/11/6	critical

检测

插件搜索

critical

critical

critical

critical

critical