PT-2023-4679 · Freerdp+8 · Freerdp+8

Pwn2Carr · Publicado 2023-08-28 · Atualizado 2025-02-15 · CVE-2023-39351

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.11.0 FreeRDP versions prior to 3.0.0-beta3

Description The issue is related to a Null Pointer Dereference in the RemoteFX (rfx) handling of FreeRDP, a free implementation of the Remote Desktop Protocol (RDP). This occurs inside the rfx process message tileset function when the program allocates tiles using rfx allocate tiles for the number of numTiles. If the initialization process of tiles is not completed for various reasons, tiles will have a NULL pointer, which may be accessed in further processing and cause a program crash.

Recommendations For versions prior to 2.11.0, upgrade to version 2.11.0 or later. For versions prior to 3.0.0-beta3, upgrade to version 3.0.0-beta3 or later. As a temporary workaround, consider restricting access to the RemoteFX (rfx) handling until a patch is available.

Exploit

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALSA-2024:2208

ALT-PU-2023-5489

ALT-PU-2023-5490

ALT-PU-2023-6067

BDU:2023-05095

CVE-2023-39351

DLA-3606-1

DLA-4053-1

GHSA-Q9X9-CQJC-RGWQ

INFSA-2024_2208

MGASA-2023-0318

OESA-2023-1656

OPENSUSE-SU-2023_4893-1

OPENSUSE-SU-2024:13504-1

RHSA-2024:2208

RHSA-2024_2208

SUSE-SU-2023:4611-1

SUSE-SU-2023:4893-1

USN-6401-1

Produtos afetados

Alt Linux

Almalinux

Astra Linux

Debian

Freerdp

Linuxmint

Red Hat

Suse

Ubuntu

Referências · 120

• 🔥 https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q9x9-cqjc-rgwq · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39351.json · Exploit
• https://bugzilla.suse.com/1214860 · Nota
• https://ubuntu.com/security/CVE-2023-39351 · Aviso do Fabricante
• https://errata.almalinux.org/9/ALSA-2024-2208.html · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-40569 · Aviso do Fabricante
• https://bugzilla.suse.com/1214868 · Nota
• https://access.redhat.com/security/cve/CVE-2023-39351 · Nota
• https://bugzilla.redhat.com/2236763 · Nota
• https://bdu.fstec.ru/vul/2023-05095 · Nota de Segurança
• https://ubuntu.com/security/CVE-2023-40567 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/OH2ATH2BKDNKCJAU4WPPXK4SHLE3UJUV · Aviso do Fabricante
• https://bugzilla.suse.com/1214871 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-39351 · Aviso do Fabricante
• https://lists.debian.org/debian-lts-announce/2025/02/msg00016.html · Nota