CVE & CISA-KEV Catalog

CVE-2024-22211

LOW
3.7
CVSS v3
NVD

Description

FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in `freerdp_bitmap_planar_context_reset` leads to heap-buffer overflow. This affects FreeRDP based clients. FreeRDP based server implementations and proxy are not affected. A malicious server could prepare a `RDPGFX_RESET_GRAPHICS_PDU` to allocate too small buffers, possibly triggering later out of bound read/write. Data extraction over network is not possible, the buffers are used to display an image. This issue has been addressed in version 2.11.5 and 3.2.0. Users are advised to upgrade. there are no know workarounds for this vulnerability.

How to fix

Remediation Available
freerdp2Debian
Fixed in:2.3.0+dfsg1-2+deb11u2CVE-2024-22211
Fixed in:2.11.7+dfsg1-6~deb12u1CVE-2024-22211
freerdpRed Hat / RHEL
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
freerdpRocky
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
freerdp-debuginfoRed Hat / RHEL
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
freerdp-debuginfoRocky
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
freerdp-debugsourceRed Hat / RHEL
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
freerdp-debugsourceRocky
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
freerdp-develRed Hat / RHEL
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
freerdp-develRocky
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
freerdp-libsRed Hat / RHEL
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
freerdp-libsRocky
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
freerdp-libs-debuginfoRed Hat / RHEL
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
freerdp-libs-debuginfoRocky
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
libwinprRed Hat / RHEL
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
libwinprRocky
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
libwinpr-debuginfoRocky
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
libwinpr-debuginfoRed Hat / RHEL
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
libwinpr-develRed Hat / RHEL
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
libwinpr-develRocky
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
Fixed in:2:2.11.7-1.el9RHSA-2024:9092
freerdp2Ubuntu
Fixed in:2.6.1+dfsg1-0ubuntu0.20.04.1USN-6749-1
Fixed in:2.6.1+dfsg1-3ubuntu2.6USN-6749-1
Fixed in:2.10.0+dfsg1-1.1ubuntu1.2USN-6749-1
libfreerdp2-2Ubuntu
Fixed in:2.6.1+dfsg1-0ubuntu0.20.04.1USN-6749-1
Fixed in:2.6.1+dfsg1-3ubuntu2.6USN-6749-1
Fixed in:2.10.0+dfsg1-1.1ubuntu1.2USN-6749-1

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork
Attack ComplexityHigh
Privileges RequiredLow
User InteractionRequired
ScopeUnchanged

Impact

ConfidentialityNone
IntegrityLow
AvailabilityLow

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:L

Exploit Intelligence

1.08%probability of exploitation in 30 days
61stpercentile

Moderate risk: more likely to be exploited than 61% of all known CVEs.

References

Related Vulnerabilities

Other CWE-122 (Heap-based Buffer Overflow) vulnerabilities, ordered by exploit likelihood. View all

CVESeverityCVSSEPSSExploitedFix
CVE-2015-3113Critical9.8100%KEVFix
CVE-2024-26256High7.888%-Fix
CVE-2020-25687Medium5.987%-Fix
CVE-2009-3459High8.886%KEVFix
CVE-2021-21017High8.886%KEV-
CVE-2020-25683Medium5.986%-Fix
Embed a live status badge for CVE-2024-22211
CVE-2024-22211 severity badge

Markdown

[![CVE-2024-22211](https://tridentstack.com/cve/badge/CVE-2024-22211.svg)](https://tridentstack.com/cve/CVE-2024-22211)

HTML

<a href="https://tridentstack.com/cve/CVE-2024-22211"><img src="https://tridentstack.com/cve/badge/CVE-2024-22211.svg" alt="CVE-2024-22211"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-11-03.