PT-2023-4666 · Freerdp+8 · Freerdp+8

Pwn2Carr · Published 2023-08-28 · Updated 2025-04-10 · CVE-2023-39350

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.11.0 FreeRDP versions prior to 3.0.0-beta3

Description The issue affects FreeRDP clients only and is related to an integer underflow leading to a Denial of Service (DOS) vulnerability. When an insufficient blockLen is provided and proper length validation is not performed, an integer underflow occurs. This can cause the program to abort due to WINPR ASSERT with default compilation flags. The vulnerability can be exploited by a remote attacker to cause a denial of service.

Recommendations For versions prior to 2.11.0, upgrade to version 2.11.0 or later. For versions prior to 3.0.0-beta3, upgrade to version 3.0.0-beta3 or later. As a temporary workaround, consider restricting the use of the FreeRDP client until a patch is available.

Exploit

Fix

DoS

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

ALSA-2024:2208

ALT-PU-2023-5489

ALT-PU-2023-5490

ALT-PU-2023-6067

BDU:2023-05079

CVE-2023-39350

DLA-3606-1

DLA-4053-1

GHSA-RRRV-3W42-PFFH

INFSA-2024_2208

MGASA-2023-0318

OESA-2023-1656

OPENSUSE-SU-2023_4893-1

OPENSUSE-SU-2024:13504-1

RHSA-2024:2208

RHSA-2024_2208

SUSE-SU-2023:4611-1

SUSE-SU-2023:4893-1

SUSE-SU-2023_4611-1

USN-6401-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Debian

Freerdp

Linuxmint

Red Hat

Suse

Ubuntu

References · 122

• 🔥 https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rrrv-3w42-pffh · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39350.json · Exploit
• https://github.com/FreeRDP/FreeRDP/commit/e204fc8be5a372626b13f66daf2abafe71dbc2dc · Patch
• https://ubuntu.com/security/CVE-2023-39351 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2024-2208.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-40569 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-40567 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/OH2ATH2BKDNKCJAU4WPPXK4SHLE3UJUV · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-39350 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-2208.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-39350 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-40569 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-39350 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/IHMTGKCZXJPQOR5ZD2I4GPDNP2DKRXMF · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-40188 · Security Note