Debian alert DLA-4070-1 (freerdp2)

From:
             
 
Tobias Frost <tobi@debian.org>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 4070-1] freerdp2 security update and regression fix
Date:
             
 
Thu, 27 Feb 2025 22:44:10 +0100
Message-ID:
             
 
<Z8Dcqs_I_UaRc0mI@isildor2.loewenhoehle.ip>
-------------------------------------------------------------------------
Debian LTS Advisory DLA-4070-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                         Tobias Frost
February 27, 2025                             https://wiki.debian.org/LTS
-------------------------------------------------------------------------

Package        : freerdp2
Version        : 2.3.0+dfsg1-2+deb11u3
CVE ID         : CVE-2022-24882 CVE-2022-39320
Debian Bug     : 1024511 1098355

Multiple vulnerabilties have been found in freelrdp2, a free
implementation of the Remote Desktop Protocol (RDP) which
potentially allows potential buffer overreads or not properly abort
NTLM authentication on empty password, if used as server.

Additonally this update fixes a regression with DLA-4053-1 affecting
drive sharing.

CVE-2022-24882

  FreeRDP is a free implementation of the Remote Desktop Protocol
  (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM)
  authentication does not properly abort when someone provides and
  empty password value. This issue affects
  FreeRDP based RDP Server implementations. RDP clients are not
  affected.

CVE-2022-39320

  FreeRDP is a free remote desktop protocol library and clients.
  Affected versions of FreeRDP may attempt integer addition on too
  narrow types leads to allocation of a buffer too small holding the
  data written. A malicious server can trick a FreeRDP based client to
  read out of bound data and send it back to the server. This issue
  has been addressed in version 2.9.0 and all users are advised to
  upgrade. Users unable to upgrade should not use the `/usb`
  redirection switch.

For Debian 11 bullseye, these problems have been fixed in version
2.3.0+dfsg1-2+deb11u3.

We recommend that you upgrade your freerdp2 packages.

For the detailed security status of freerdp2 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/freerdp2

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----

iQIzBAABCAAdFiEE/d0M/zhkJ3YwohhskWT6HRe9XTYFAmfA3KYACgkQkWT6HRe9
XTbyxA//eZHuCCSXMqCtmTqOklLz7G+W1drSKX7UpuOIHNCifvdoaz5tSmXtmKGW
+GB9oBNpwc3URIfnPz3oNLlMIDBv1jir59gv7U2QXksvzZKEJwZOOYke2cRuHMSN
sqVzXRyNH8jAB+C/BE/1xDP0wj5DjEp6xd/pCcx/bTb/fNwC5V8LI1sI27IT60Vv
2UQTtNnzJJihi5Lj7pXhg8C+RSjRipyEVOpKWdqtGiXwK0yyCR1sbepNR1+jwSLh
0pnvgYMm7yrv75cta2EyafSc0rzIQWpQkJ48AFD3AXHhmjGw4FvukA0tL5ubxpai
t1G4r2r1h6yBybpPIZh2Gydv7qgpLuDEaMlcPAVlJAeE0QgutsM7byC6SpdPj2Lv
AEOCW3BKlytmWt2jnBRkyeAtLUyRC6QyFOi3UV6jmWekDZE2CtYuXPdx4h36m0r8
WeB66E6BVAvsBMCIFqYnFQQ/clyQ+ozgU/PCJ0bRtl1uUfXhfzAMpFxT5RHvwNZs
LB6PutgMAeSIcpEVj0tr9mDu4LstgiXg1Qx/YmiVid06adx8Xnn+4TCnadIPzQoR
kwt9rzjVMaKHpz3tFgEXaYGtn6zuwD0Ro4VVihPd6EIDQD6OwUStol/E8q1dVJBb
aTtNACtpMP2AUvCouBnZgAPV5hjA/cHpTqVpz5yW8VX+kJYKtYM=
=Hu04
-----END PGP SIGNATURE-----