GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

OESA-2024-1515 (CVE-2024-32039)

Vulnerability from osv_openeuler – Published: 2024-04-26 11:06 – Updated: 2026-08-06 11:06 – Source website
VLAI
Summary
freerdp security update
Details

FreeRDP is a client implementation of the Remote Desktop Protocol (RDP) that follows Microsoft's open specifications. This package provides the client applications xfreerdp and wlfreerdp.

Security Fix(es):

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients using a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to integer overflow and out-of-bounds write. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, do not use /gfx options (e.g. deactivate with /bpp:32 or /rfx as it is on by default).(CVE-2024-32039)

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 and have connections to servers using the NSC codec are vulnerable to integer underflow. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, do not use the NSC codec (e.g. use -nsc).(CVE-2024-32040)

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, deactivate /gfx (on by default, set /bpp or /rfx options instead.(CVE-2024-32041)

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, use /gfx or /rfx modes (on by default, require server side support).(CVE-2024-32458)

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients and servers that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. No known workarounds are available.(CVE-2024-32459)

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based based clients using /bpp:32 legacy GDI drawing path with a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, use modern drawing paths (e.g. /rfx or /gfx options). The workaround requires server side support.(CVE-2024-32460)

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. Version 3.5.1 contains a patch for the issue. No known workarounds are available.(CVE-2024-32658)

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read if ((nWidth == 0) and (nHeight == 0)). Version 3.5.1 contains a patch for the issue. No known workarounds are available.(CVE-2024-32659)

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.5.1, a malicious server can crash the FreeRDP client by sending invalid huge allocation size. Version 3.5.1 contains a patch for the issue. No known workarounds are available.(CVE-2024-32660)

Severity
9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
To clipboard 

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "freerdp-devel-2.11.7-1.oe1.aarch64.rpm",
          "freerdp-debugsource-2.11.7-1.oe1.aarch64.rpm",
          "libwinpr-devel-2.11.7-1.oe1.aarch64.rpm",
          "freerdp-help-2.11.7-1.oe1.aarch64.rpm",
          "freerdp-2.11.7-1.oe1.aarch64.rpm",
          "freerdp-debuginfo-2.11.7-1.oe1.aarch64.rpm",
          "libwinpr-2.11.7-1.oe1.aarch64.rpm"
        ],
        "src": [
          "freerdp-2.11.7-1.oe1.src.rpm"
        ],
        "x86_64": [
          "freerdp-2.11.7-1.oe1.x86_64.rpm",
          "libwinpr-2.11.7-1.oe1.x86_64.rpm",
          "freerdp-devel-2.11.7-1.oe1.x86_64.rpm",
          "freerdp-debugsource-2.11.7-1.oe1.x86_64.rpm",
          "libwinpr-devel-2.11.7-1.oe1.x86_64.rpm",
          "freerdp-debuginfo-2.11.7-1.oe1.x86_64.rpm",
          "freerdp-help-2.11.7-1.oe1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP1",
        "name": "freerdp",
        "purl": "pkg:rpm/openEuler/freerdp\u0026distro=openEuler-20.03-LTS-SP1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.11.7-1.oe1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "libwinpr-2.11.7-1.oe2003sp4.aarch64.rpm",
          "freerdp-debuginfo-2.11.7-1.oe2003sp4.aarch64.rpm",
          "freerdp-devel-2.11.7-1.oe2003sp4.aarch64.rpm",
          "freerdp-debugsource-2.11.7-1.oe2003sp4.aarch64.rpm",
          "freerdp-2.11.7-1.oe2003sp4.aarch64.rpm",
          "freerdp-help-2.11.7-1.oe2003sp4.aarch64.rpm",
          "libwinpr-devel-2.11.7-1.oe2003sp4.aarch64.rpm"
        ],
        "src": [
          "freerdp-2.11.7-1.oe2003sp4.src.rpm"
        ],
        "x86_64": [
          "freerdp-2.11.7-1.oe2003sp4.x86_64.rpm",
          "freerdp-devel-2.11.7-1.oe2003sp4.x86_64.rpm",
          "libwinpr-2.11.7-1.oe2003sp4.x86_64.rpm",
          "freerdp-help-2.11.7-1.oe2003sp4.x86_64.rpm",
          "freerdp-debugsource-2.11.7-1.oe2003sp4.x86_64.rpm",
          "freerdp-debuginfo-2.11.7-1.oe2003sp4.x86_64.rpm",
          "libwinpr-devel-2.11.7-1.oe2003sp4.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP4",
        "name": "freerdp",
        "purl": "pkg:rpm/openEuler/freerdp\u0026distro=openEuler-20.03-LTS-SP4"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.11.7-1.oe2003sp4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "libwinpr-devel-2.11.7-1.oe2203.aarch64.rpm",
          "freerdp-2.11.7-1.oe2203.aarch64.rpm",
          "freerdp-debugsource-2.11.7-1.oe2203.aarch64.rpm",
          "libwinpr-2.11.7-1.oe2203.aarch64.rpm",
          "freerdp-debuginfo-2.11.7-1.oe2203.aarch64.rpm",
          "freerdp-help-2.11.7-1.oe2203.aarch64.rpm",
          "freerdp-devel-2.11.7-1.oe2203.aarch64.rpm",
          "freerdp-debuginfo-2.11.7-1.oe2203sp1.aarch64.rpm",
          "libwinpr-2.11.7-1.oe2203sp1.aarch64.rpm",
          "freerdp-2.11.7-1.oe2203sp1.aarch64.rpm",
          "freerdp-devel-2.11.7-1.oe2203sp1.aarch64.rpm",
          "freerdp-help-2.11.7-1.oe2203sp1.aarch64.rpm",
          "libwinpr-devel-2.11.7-1.oe2203sp1.aarch64.rpm",
          "freerdp-debugsource-2.11.7-1.oe2203sp1.aarch64.rpm",
          "freerdp-debugsource-2.11.7-1.oe2203sp2.aarch64.rpm",
          "libwinpr-2.11.7-1.oe2203sp2.aarch64.rpm",
          "freerdp-devel-2.11.7-1.oe2203sp2.aarch64.rpm",
          "libwinpr-devel-2.11.7-1.oe2203sp2.aarch64.rpm",
          "freerdp-debuginfo-2.11.7-1.oe2203sp2.aarch64.rpm",
          "freerdp-2.11.7-1.oe2203sp2.aarch64.rpm",
          "freerdp-help-2.11.7-1.oe2203sp2.aarch64.rpm",
          "freerdp-help-2.11.7-1.oe2203sp3.aarch64.rpm",
          "freerdp-debugsource-2.11.7-1.oe2203sp3.aarch64.rpm",
          "libwinpr-2.11.7-1.oe2203sp3.aarch64.rpm",
          "freerdp-debuginfo-2.11.7-1.oe2203sp3.aarch64.rpm",
          "freerdp-2.11.7-1.oe2203sp3.aarch64.rpm",
          "freerdp-devel-2.11.7-1.oe2203sp3.aarch64.rpm",
          "libwinpr-devel-2.11.7-1.oe2203sp3.aarch64.rpm"
        ],
        "src": [
          "freerdp-2.11.7-1.oe2203.src.rpm",
          "freerdp-2.11.7-1.oe2203sp1.src.rpm",
          "freerdp-2.11.7-1.oe2203sp2.src.rpm",
          "freerdp-2.11.7-1.oe2203sp3.src.rpm"
        ],
        "x86_64": [
          "libwinpr-devel-2.11.7-1.oe2203.x86_64.rpm",
          "freerdp-2.11.7-1.oe2203.x86_64.rpm",
          "freerdp-debuginfo-2.11.7-1.oe2203.x86_64.rpm",
          "libwinpr-2.11.7-1.oe2203.x86_64.rpm",
          "freerdp-help-2.11.7-1.oe2203.x86_64.rpm",
          "freerdp-debugsource-2.11.7-1.oe2203.x86_64.rpm",
          "freerdp-devel-2.11.7-1.oe2203.x86_64.rpm",
          "freerdp-debuginfo-2.11.7-1.oe2203sp1.x86_64.rpm",
          "freerdp-2.11.7-1.oe2203sp1.x86_64.rpm",
          "freerdp-help-2.11.7-1.oe2203sp1.x86_64.rpm",
          "libwinpr-2.11.7-1.oe2203sp1.x86_64.rpm",
          "freerdp-devel-2.11.7-1.oe2203sp1.x86_64.rpm",
          "libwinpr-devel-2.11.7-1.oe2203sp1.x86_64.rpm",
          "freerdp-debugsource-2.11.7-1.oe2203sp1.x86_64.rpm",
          "libwinpr-devel-2.11.7-1.oe2203sp2.x86_64.rpm",
          "freerdp-help-2.11.7-1.oe2203sp2.x86_64.rpm",
          "freerdp-2.11.7-1.oe2203sp2.x86_64.rpm",
          "freerdp-debuginfo-2.11.7-1.oe2203sp2.x86_64.rpm",
          "freerdp-devel-2.11.7-1.oe2203sp2.x86_64.rpm",
          "freerdp-debugsource-2.11.7-1.oe2203sp2.x86_64.rpm",
          "libwinpr-2.11.7-1.oe2203sp2.x86_64.rpm",
          "freerdp-debugsource-2.11.7-1.oe2203sp3.x86_64.rpm",
          "freerdp-devel-2.11.7-1.oe2203sp3.x86_64.rpm",
          "freerdp-help-2.11.7-1.oe2203sp3.x86_64.rpm",
          "freerdp-2.11.7-1.oe2203sp3.x86_64.rpm",
          "freerdp-debuginfo-2.11.7-1.oe2203sp3.x86_64.rpm",
          "libwinpr-devel-2.11.7-1.oe2203sp3.x86_64.rpm",
          "libwinpr-2.11.7-1.oe2203sp3.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:22.03-LTS",
        "name": "freerdp",
        "purl": "pkg:rpm/openEuler/freerdp\u0026distro=openEuler-22.03-LTS"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.11.7-1.oe2203sp3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "freerdp-debuginfo-2.11.7-1.oe2203sp1.aarch64.rpm",
          "libwinpr-2.11.7-1.oe2203sp1.aarch64.rpm",
          "freerdp-2.11.7-1.oe2203sp1.aarch64.rpm",
          "freerdp-devel-2.11.7-1.oe2203sp1.aarch64.rpm",
          "freerdp-help-2.11.7-1.oe2203sp1.aarch64.rpm",
          "libwinpr-devel-2.11.7-1.oe2203sp1.aarch64.rpm",
          "freerdp-debugsource-2.11.7-1.oe2203sp1.aarch64.rpm"
        ],
        "src": [
          "freerdp-2.11.7-1.oe2203sp1.src.rpm"
        ],
        "x86_64": [
          "freerdp-debuginfo-2.11.7-1.oe2203sp1.x86_64.rpm",
          "freerdp-2.11.7-1.oe2203sp1.x86_64.rpm",
          "freerdp-help-2.11.7-1.oe2203sp1.x86_64.rpm",
          "libwinpr-2.11.7-1.oe2203sp1.x86_64.rpm",
          "freerdp-devel-2.11.7-1.oe2203sp1.x86_64.rpm",
          "libwinpr-devel-2.11.7-1.oe2203sp1.x86_64.rpm",
          "freerdp-debugsource-2.11.7-1.oe2203sp1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:22.03-LTS-SP1",
        "name": "freerdp",
        "purl": "pkg:rpm/openEuler/freerdp\u0026distro=openEuler-22.03-LTS-SP1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.11.7-1.oe2203sp1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "freerdp-debugsource-2.11.7-1.oe2203sp2.aarch64.rpm",
          "libwinpr-2.11.7-1.oe2203sp2.aarch64.rpm",
          "freerdp-devel-2.11.7-1.oe2203sp2.aarch64.rpm",
          "libwinpr-devel-2.11.7-1.oe2203sp2.aarch64.rpm",
          "freerdp-debuginfo-2.11.7-1.oe2203sp2.aarch64.rpm",
          "freerdp-2.11.7-1.oe2203sp2.aarch64.rpm",
          "freerdp-help-2.11.7-1.oe2203sp2.aarch64.rpm"
        ],
        "src": [
          "freerdp-2.11.7-1.oe2203sp2.src.rpm"
        ],
        "x86_64": [
          "libwinpr-devel-2.11.7-1.oe2203sp2.x86_64.rpm",
          "freerdp-help-2.11.7-1.oe2203sp2.x86_64.rpm",
          "freerdp-2.11.7-1.oe2203sp2.x86_64.rpm",
          "freerdp-debuginfo-2.11.7-1.oe2203sp2.x86_64.rpm",
          "freerdp-devel-2.11.7-1.oe2203sp2.x86_64.rpm",
          "freerdp-debugsource-2.11.7-1.oe2203sp2.x86_64.rpm",
          "libwinpr-2.11.7-1.oe2203sp2.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:22.03-LTS-SP2",
        "name": "freerdp",
        "purl": "pkg:rpm/openEuler/freerdp\u0026distro=openEuler-22.03-LTS-SP2"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.11.7-1.oe2203sp2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "freerdp-help-2.11.7-1.oe2203sp3.aarch64.rpm",
          "freerdp-debugsource-2.11.7-1.oe2203sp3.aarch64.rpm",
          "libwinpr-2.11.7-1.oe2203sp3.aarch64.rpm",
          "freerdp-debuginfo-2.11.7-1.oe2203sp3.aarch64.rpm",
          "freerdp-2.11.7-1.oe2203sp3.aarch64.rpm",
          "freerdp-devel-2.11.7-1.oe2203sp3.aarch64.rpm",
          "libwinpr-devel-2.11.7-1.oe2203sp3.aarch64.rpm"
        ],
        "src": [
          "freerdp-2.11.7-1.oe2203sp3.src.rpm"
        ],
        "x86_64": [
          "freerdp-debugsource-2.11.7-1.oe2203sp3.x86_64.rpm",
          "freerdp-devel-2.11.7-1.oe2203sp3.x86_64.rpm",
          "freerdp-help-2.11.7-1.oe2203sp3.x86_64.rpm",
          "freerdp-2.11.7-1.oe2203sp3.x86_64.rpm",
          "freerdp-debuginfo-2.11.7-1.oe2203sp3.x86_64.rpm",
          "libwinpr-devel-2.11.7-1.oe2203sp3.x86_64.rpm",
          "libwinpr-2.11.7-1.oe2203sp3.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:22.03-LTS-SP3",
        "name": "freerdp",
        "purl": "pkg:rpm/openEuler/freerdp\u0026distro=openEuler-22.03-LTS-SP3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.11.7-1.oe2203sp3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "Critical"
  },
  "details": "FreeRDP is a client implementation of the Remote Desktop Protocol (RDP) that follows Microsoft\u0026apos;s open specifications. This package provides the client applications xfreerdp and wlfreerdp.\r\n\r\nSecurity Fix(es):\r\n\r\nFreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients using a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to integer overflow and out-of-bounds write. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, do not use `/gfx` options (e.g. deactivate with `/bpp:32` or `/rfx` as it is on by default).(CVE-2024-32039)\r\n\r\nFreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 and have connections to servers using the `NSC` codec are vulnerable to integer underflow. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, do not use the NSC codec (e.g. use `-nsc`).(CVE-2024-32040)\r\n\r\nFreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, deactivate `/gfx` (on by default, set `/bpp` or `/rfx` options instead.(CVE-2024-32041)\r\n\r\nFreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, use `/gfx` or `/rfx` modes (on by default, require server side support).(CVE-2024-32458)\r\n\r\nFreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients and servers that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. No known workarounds are available.(CVE-2024-32459)\r\n\r\nFreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based based clients using `/bpp:32` legacy `GDI` drawing path with a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, use modern drawing paths (e.g. `/rfx` or `/gfx` options). The workaround requires server side support.(CVE-2024-32460)\r\n\r\nFreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. Version 3.5.1 contains a patch for the issue. No known workarounds are available.(CVE-2024-32658)\r\n\r\nFreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read if `((nWidth == 0) and (nHeight == 0))`. Version 3.5.1 contains a patch for the issue. No known workarounds are available.(CVE-2024-32659)\r\n\r\nFreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.5.1, a malicious server can crash the FreeRDP client by sending invalid huge allocation size. Version 3.5.1 contains a patch for the issue. No known workarounds are available.(CVE-2024-32660)",
  "id": "OESA-2024-1515",
  "modified": "2026-08-06T11:06:57Z",
  "published": "2024-04-26T11:06:57Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1515"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-32039"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-32040"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-32041"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-32458"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-32459"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-32460"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-32658"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-32659"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-32660"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "freerdp security update",
  "upstream": [
    "CVE-2024-32039",
    "CVE-2024-32040",
    "CVE-2024-32041",
    "CVE-2024-32458",
    "CVE-2024-32459",
    "CVE-2024-32460",
    "CVE-2024-32658",
    "CVE-2024-32659",
    "CVE-2024-32660"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.