Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-40589HistoryAug 31, 2023 - 7:15 p.m.
CVE-2023-40589
2023-08-3119:15:11
Debian Security Bug Tracker
security-tracker.debian.org
3
freerdp
remote desktop protocol
global buffer overflow
cve-2023-40589
ncrush decompress
crafted input
apache license
upgrade
unix
0.001 Low
EPSS
Percentile
33.9%
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions there is a Global-Buffer-Overflow in the ncrush_decompress function. Feeding crafted input into this function can trigger the overflow which has only been shown to cause a crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | freerdp2 | <=Â 2.10.0+dfsg1-1 | freerdp2_2.10.0+dfsg1-1_all.deb |
| Debian | 11 | all | freerdp2 | <=Â 2.3.0+dfsg1-2+deb11u1 | freerdp2_2.3.0+dfsg1-2+deb11u1_all.deb |
| Debian | 10 | all | freerdp2 | <Â 2.3.0+dfsg1-2+deb10u3 | freerdp2_2.3.0+dfsg1-2+deb10u3_all.deb |
| Debian | 999 | all | freerdp2 | <Â 2.11.2+dfsg1-1 | freerdp2_2.11.2+dfsg1-1_all.deb |
| Debian | 13 | all | freerdp2 | <Â 2.11.2+dfsg1-1 | freerdp2_2.11.2+dfsg1-1_all.deb |
Related
cve
cve
CVE-2023-40589
2023-08-31 19:15:11
alpinelinux
alpinelinux
CVE-2023-40589
2023-08-31 19:15:11
prion
prion
Buffer overflow
2023-08-31 19:15:00
osv
osv
CVE-2023-40589
2023-08-31 19:15:11
freerdp2 vulnerabilities
2023-10-04 11:00:57
Moderate: freerdp security update
2024-04-30 00:00:00
cvelist
cvelist
CVE-2023-40589 FreeRDP Global-Buffer-Overflow in ncrush_decompress
2023-08-31 18:31:07
redhatcve
redhatcve
CVE-2023-40589
2023-09-05 15:14:48
cnvd
cnvd
FreeRDP Buffer Overflow Vulnerability (CNVD-2023-72250)
2023-09-05 00:00:00
veracode
veracode
Buffer Overflow
2023-09-06 02:35:07
ubuntucve
ubuntucve
CVE-2023-40589
2023-08-31 00:00:00
nessus
nessus
EulerOS 2.0 SP8 : freerdp (EulerOS-SA-2024-1264)
2024-03-12 00:00:00
Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : FreeRDP vulnerabilities (USN-6401-1)
2023-10-04 00:00:00
Amazon Linux 2 : freerdp (ALAS-2023-2269)
2023-10-05 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0318)
2023-11-16 00:00:00
Ubuntu: Security Advisory (USN-6401-1)
2023-10-05 00:00:00
Huawei EulerOS: Security Advisory for freerdp (EulerOS-SA-2024-1264)
2024-03-12 00:00:00
mageia
mageia
Updated freerdp packages fix security vulnerabilities
2023-11-15 14:35:09
ubuntu
ubuntu
FreeRDP vulnerabilities
2023-10-04 00:00:00
amazon
amazon
Medium: freerdp
2023-09-27 22:48:00
fedora
fedora
[SECURITY] Fedora 38 Update: freerdp-2.11.1-1.fc38
2023-09-10 01:21:16
[SECURITY] Fedora 39 Update: freerdp-2.11.1-1.fc39
2023-09-21 00:16:43
[SECURITY] Fedora 37 Update: freerdp-2.11.1-1.fc37
2023-09-21 01:22:07
almalinux
almalinux
Moderate: freerdp security update
2024-04-30 00:00:00
redhat
redhat
(RHSA-2024:2208) Moderate: freerdp security update
2024-04-30 06:15:03
oraclelinux
oraclelinux
freerdp security update
2024-05-02 00:00:00
gentoo
gentoo
FreeRDP: Multiple Vulnerabilities
2024-01-12 00:00:00
debian
debian
[SECURITY] [DLA 3606-1] freerdp2 security update
2023-10-07 18:09:48