CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
60.7%
libfreerdp.so is vulnerable to Out-Of-Bound Write. The vulnerability exists due to an integer overflow in the freerdp_image_copy
function of color.c
when an image width or height == 0, which allows an attacker to cause out-of-bound write when image decoding is done by a proxy.
github.com/FreeRDP/FreeRDP/blob/fee2b10ba1154f952769a53eb608f044782e22f8/libfreerdp/gdi/gfx.c#L1156-L1165
github.com/FreeRDP/FreeRDP/commit/9f967b49428a7e754b329aa7ab09983517fd3402
github.com/FreeRDP/FreeRDP/commit/ed264b9c24bd81bafacee9d464fee809914506b5
github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hcj4-3c3r-5j3v
lists.debian.org/debian-lts-announce/2023/10/msg00008.html
lists.fedoraproject.org/archives/list/[email protected]/message/A6LLDAPEXRDJOM3PREDDD267SSNT77DP/
lists.fedoraproject.org/archives/list/[email protected]/message/IHMTGKCZXJPQOR5ZD2I4GPDNP2DKRXMF/
lists.fedoraproject.org/archives/list/[email protected]/message/OH2ATH2BKDNKCJAU4WPPXK4SHLE3UJUV/
security.gentoo.org/glsa/202401-16