Veracode Vulnerability DatabaseVERACODE:32696Out-of-Bounds Write
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
freerdp is vulnerable to out-of-bounds write. The vulnerability exists due to a lack of validation of the width/height of the graphic update of a rectangle which may trigger an out of bounds write if it is set to ‘0’ allowing writing to the memory allocation set by the point at this unallocated region.
References
github.com/FreeRDP/FreeRDP/security/advisories/GHSA-7c9r-6r2q-93qg
lists.fedoraproject.org/archives/list/[email protected]/message/DWJXQOWKNR7O5HM2HFJOM4GBUFPTE3RG/
lists.fedoraproject.org/archives/list/[email protected]/message/WIZUPVRGCWUDAPDOQVUGUIYUO7UWKMXX/
lists.fedoraproject.org/archives/list/[email protected]/message/ZXCR73EDVPLI6TRWRAWJCJ7OBYDKBB74/
secdb.alpinelinux.org/edge/community.yaml
security.gentoo.org/glsa/202210-24
Related
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P