Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-39353HistoryAug 31, 2023 - 9:15 p.m.
CVE-2023-39353
2023-08-3121:15:08
Alpine Linux Development Team
security.alpinelinux.org
9
freerdp
remote desktop protocol
missing offset validation
out of bound read
apache license
vulnerability
upgrade
crafted input
EPSS
0.002
Percentile
59.3%
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to a missing offset validation leading to Out Of Bound Read. In the libfreerdp/codec/rfx.c file there is no offset validation in tile->quantIdxY, tile->quantIdxCb, and tile->quantIdxCr. As a result crafted input can lead to an out of bounds read access which in turn will cause a crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this vulnerability.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.18-community | noarch | freerdp | = 2.10.0-r1 | UNKNOWN |
Related
cve
cve
CVE-2023-39353
2023-08-31 21:15:08
ubuntucve
ubuntucve
CVE-2023-39353
2023-08-31 00:00:00
prion
prion
Out-of-bounds
2023-08-31 21:15:00
osv
osv
CVE-2023-39353
2023-08-31 21:15:08
freerdp2 vulnerabilities
2023-10-04 11:00:57
Moderate: freerdp security update
2024-04-30 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2023-39353
2023-08-31 21:15:08
debiancve
debiancve
CVE-2023-39353
2023-08-31 21:15:08
redhatcve
redhatcve
CVE-2023-39353
2023-09-05 15:14:18
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0318)
2023-11-16 00:00:00
Ubuntu: Security Advisory (USN-6401-1)
2023-10-05 00:00:00
Huawei EulerOS: Security Advisory for freerdp (EulerOS-SA-2024-1264)
2024-03-12 00:00:00
nessus
nessus
Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : FreeRDP vulnerabilities (USN-6401-1)
2023-10-04 00:00:00
EulerOS 2.0 SP8 : freerdp (EulerOS-SA-2024-1264)
2024-03-12 00:00:00
Amazon Linux 2 : freerdp (ALAS-2023-2269)
2023-10-05 00:00:00
mageia
mageia
Updated freerdp packages fix security vulnerabilities
2023-11-15 14:35:09
ubuntu
ubuntu
FreeRDP vulnerabilities
2023-10-04 00:00:00
amazon
amazon
Medium: freerdp
2023-09-27 22:48:00
redhat
redhat
(RHSA-2024:2208) Moderate: freerdp security update
2024-04-30 06:15:03
oraclelinux
oraclelinux
freerdp security update
2024-05-02 00:00:00
almalinux
almalinux
Moderate: freerdp security update
2024-04-30 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: freerdp-2.11.1-1.fc39
2023-09-21 00:16:43
[SECURITY] Fedora 37 Update: freerdp-2.11.1-1.fc37
2023-09-21 01:22:07
[SECURITY] Fedora 38 Update: freerdp-2.11.1-1.fc38
2023-09-10 01:21:16
gentoo
gentoo
FreeRDP: Multiple Vulnerabilities
2024-01-12 00:00:00
debian
debian
[SECURITY] [DLA 3606-1] freerdp2 security update
2023-10-07 18:09:17