PT-2022-5613 · Freerdp+9 · Freerdp+9

Bmiklautz · Published 2022-11-14 · Updated 2025-02-15 · CVE-2022-41877

Positive Technologies (AI Summary)

CVSS v2.0

9.4

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:C

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.9.0

Description The issue is related to a lack of input length validation in the drive channel of the FreeRDP protocol implementation. This can be exploited by a malicious server to trick a FreeRDP-based client into reading out of bound data and sending it back to the server, potentially allowing unauthorized access to protected information or causing a denial of service. The vulnerability can be exploited by sending data back to the server using command line options /drive, +drives, or +home-drive.

Recommendations For versions prior to 2.9.0, upgrade to version 2.9.0 or later to address the issue. As a temporary workaround for users unable to upgrade, do not use the drive redirection channel - command line options /drive, +drives, or +home-drive.

Exploit

Fix

Buffer Overflow

Out of bounds Read

Weakness Enumeration

CWE-1284

CWE-119

CWE-125

Related Identifiers

ALSA-2023:2326

ALSA-2023:2851

ALT-PU-2022-3127

ALT-PU-2022-3189

ALT-PU-2022-3199

ALT-PU-2022-3288

BDU:2022-06976

CESA-2023_2851

CVE-2022-41877

DLA-3654-1

DLA-4053-1

GHSA-PMV3-WPW4-PW5H

MGASA-2022-0474

OESA-2022-2112

OPENSUSE-SU-2023_0399-1

RHSA-2023:2326

RHSA-2023:2851

RHSA-2023_2326

RHSA-2023_2851

SUSE-SU-2023:0399-1

SUSE-SU-2023:0400-1

USN-6522-1

USN-6522-2

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Freerdp

Linuxmint

Red Hat

Red Os

Suse

Ubuntu

References · 82

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41877.json · Exploit
• https://github.com/FreeRDP/FreeRDP/commit/6655841cf2a00b764f855040aecb8803cfc5eaba · Patch
• https://osv.dev/vulnerability/MGASA-2022-0474 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6522-2 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-2851.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-39347 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2023:0400-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-41877 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-39318 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-39316 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-39319 · Security Note
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0316SE47MD · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-39356 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2023-2851.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-6522-2 · Vendor Advisory