FreeRDP is a free implementation of the Remote Desktop Protocol (RDP),
released under the Apache license. Affected versions are subject to an
invalid offset validation leading to Out Of Bound Write. This can be
triggered when the values rect->left
and rect->top
are exactly equal to
surface->width
and surface->height
. eg. rect->left
==
surface->width
&& rect->top
== surface->height
. In practice this
should cause a crash. This issue has been addressed in versions 2.11.0 and
3.0.0-beta3. Users are advised to upgrade. There are no known workarounds
for this vulnerability.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 18.04 | noarch | freerdp2 | <Â 2.2.0+dfsg1-0ubuntu0.18.04.4+esm2 | UNKNOWN |
ubuntu | 20.04 | noarch | freerdp2 | <Â 2.2.0+dfsg1-0ubuntu0.20.04.6 | UNKNOWN |
ubuntu | 22.04 | noarch | freerdp2 | <Â 2.6.1+dfsg1-3ubuntu2.5 | UNKNOWN |
ubuntu | 23.04 | noarch | freerdp2 | <Â 2.10.0+dfsg1-1ubuntu0.3 | UNKNOWN |
ubuntu | 23.10 | noarch | freerdp2 | <Â 2.10.0+dfsg1-1.1ubuntu1.1 | UNKNOWN |
github.com/FreeRDP/FreeRDP/blob/63a2f65618748c12f79ff7450d46c6e194f2db76/libfreerdp/gdi/gfx.c#L1219-L1239
github.com/FreeRDP/FreeRDP/security/advisories/GHSA-whwr-qcf2-2mvj
launchpad.net/bugs/cve/CVE-2023-39352
nvd.nist.gov/vuln/detail/CVE-2023-39352
security-tracker.debian.org/tracker/CVE-2023-39352
ubuntu.com/security/notices/USN-6522-1
ubuntu.com/security/notices/USN-6522-2
www.cve.org/CVERecord?id=CVE-2023-39352