PT-2023-4666 · Freerdp+8 · Freerdp+8

Pwn2Carr · Publicado 2023-08-28 · Atualizado 2025-04-10 · CVE-2023-39350

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.11.0 FreeRDP versions prior to 3.0.0-beta3

Description The issue affects FreeRDP clients only and is related to an integer underflow leading to a Denial of Service (DOS) vulnerability. When an insufficient blockLen is provided and proper length validation is not performed, an integer underflow occurs. This can cause the program to abort due to WINPR ASSERT with default compilation flags. The vulnerability can be exploited by a remote attacker to cause a denial of service.

Recommendations For versions prior to 2.11.0, upgrade to version 2.11.0 or later. For versions prior to 3.0.0-beta3, upgrade to version 3.0.0-beta3 or later. As a temporary workaround, consider restricting the use of the FreeRDP client until a patch is available.

Exploit

Correção

DoS

Integer Underflow

Enumeração de Fraquezas

CWE-191

Identificadores relacionados

ALSA-2024:2208

ALT-PU-2023-5489

ALT-PU-2023-5490

ALT-PU-2023-6067

BDU:2023-05079

CVE-2023-39350

DLA-3606-1

DLA-4053-1

GHSA-RRRV-3W42-PFFH

INFSA-2024_2208

MGASA-2023-0318

OESA-2023-1656

OPENSUSE-SU-2023_4893-1

OPENSUSE-SU-2024:13504-1

RHSA-2024:2208

RHSA-2024_2208

SUSE-SU-2023:4611-1

SUSE-SU-2023:4893-1

SUSE-SU-2023_4611-1

USN-6401-1

Produtos afetados

Alt Linux

Almalinux

Astra Linux

Debian

Freerdp

Linuxmint

Red Hat

Suse

Ubuntu

Referências · 122

• 🔥 https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rrrv-3w42-pffh · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39350.json · Exploit
• https://github.com/FreeRDP/FreeRDP/commit/e204fc8be5a372626b13f66daf2abafe71dbc2dc · Correção
• https://bugzilla.suse.com/1214860 · Nota
• https://ubuntu.com/security/CVE-2023-39351 · Aviso do Fabricante
• https://errata.almalinux.org/9/ALSA-2024-2208.html · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-40569 · Aviso do Fabricante
• https://bugzilla.suse.com/1214868 · Nota
• https://access.redhat.com/security/cve/CVE-2023-39351 · Nota
• https://bugzilla.redhat.com/2236763 · Nota
• https://ubuntu.com/security/CVE-2023-40567 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/OH2ATH2BKDNKCJAU4WPPXK4SHLE3UJUV · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-39350 · Aviso do Fabricante
• https://bugzilla.suse.com/1214871 · Nota
• https://lists.debian.org/debian-lts-announce/2025/02/msg00016.html · Nota