PT-2022-5609 · Freerdp+10 · Freerdp+10

Published 2022-11-16 · Updated 2024-01-12 · CVE-2022-39317

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.9.0

Description The issue is related to a missing range check for input offset index in the ZGFX decoder of FreeRDP, allowing a malicious server to trick a FreeRDP-based client into reading out of bound data and attempting to decode it. This can enable a remote attacker to gain unauthorized access to protected information. There are no known workarounds for this issue.

Recommendations For versions prior to 2.9.0, update to version 2.9.0 to resolve the issue. As a temporary workaround, consider restricting access to the ZGFX decoder until a patch is available.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2023:2326

ALSA-2023:2851

ALT-PU-2022-3127

ALT-PU-2022-3189

ALT-PU-2022-3199

ALT-PU-2022-3288

BDU:2022-06972

CESA-2023_2851

CVE-2022-39317

GHSA-99CM-4GW7-C8JH

MGASA-2022-0447

OESA-2022-2120

OPENSUSE-SU-2023_0399-1

RHSA-2023:2326

RHSA-2023:2851

RHSA-2023_2326

RHSA-2023_2851

SUSE-SU-2023:0399-1

SUSE-SU-2023:0400-1

USN-5734-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Debian

Freerdp

Linuxmint

Red Hat

Red Os

Suse

Ubuntu

References · 79

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39317.json · Exploit
• https://linux.oracle.com/errata/ELSA-2023-2851.html · Vendor Advisory
• https://advisories.mageia.org/MGASA-2022-0447.html · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2023:0400-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-39317 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-39317 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0316SE47MD · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2023-2851.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-39316 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5734-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2023:2326 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-39317 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-39317 · Security Note
• https://osv.dev/vulnerability/MGASA-2022-0447 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-39320 · Vendor Advisory