{"id":"CLSA-2024-1721206783","summary":"freerdp: Fix of 12 CVEs","details":"- CVE-2023-39352: add bound check in gdi_SolidFill\n- CVE-2023-39353: check indices are within range\n- CVE-2023-39356: fix checks for multi opaque rect\n- CVE-2023-40181: fix cBitsRemaining calculation\n- CVE-2023-40186: fix integer multiplications\n- CVE-2023-40188: fix input length validation\n- CVE-2023-40567: fix missing bounds checks\n- CVE-2023-40569: fix missing destination checks\n- CVE-2024-22211: check resolution for overflow\n- CVE-2023-39351: free content of currentMessage on fail\n- CVE-2023-39350: fix possible out of bound read\n- CVE-2023-40589: properly verify all offsets while decoding data","modified":"2026-05-27T11:33:20.039746745Z","published":"2024-07-17T08:59:46Z","upstream":["CVE-2023-39350","CVE-2023-39351","CVE-2023-39352","CVE-2023-39353","CVE-2023-39356","CVE-2023-40181","CVE-2023-40186","CVE-2023-40188","CVE-2023-40567","CVE-2023-40569","CVE-2023-40589","CVE-2024-22211"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/centos7-els/CLSA-2024-1721206783.html"}],"affected":[{"package":{"name":"freerdp","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/freerdp?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-5.el7_9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1721206783.json"}},{"package":{"name":"freerdp-devel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/freerdp-devel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-5.el7_9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1721206783.json"}},{"package":{"name":"freerdp-libs","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/freerdp-libs?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-5.el7_9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1721206783.json"}},{"package":{"name":"libwinpr","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/libwinpr?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-5.el7_9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1721206783.json"}},{"package":{"name":"libwinpr-devel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/libwinpr-devel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-5.el7_9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1721206783.json"}}],"schema_version":"1.7.5"}