PT-2023-4668 · Freerdp+8 · Freerdp+8

Pwn2Carr · Published 2023-08-09 · Updated 2025-02-15 · CVE-2023-40188

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.11.0 FreeRDP versions prior to 3.0.0-beta3

Description The issue is related to an Out-Of-Bounds Read in the general LumaToYUV444 function. This occurs because processing is done on the in variable without checking if it contains data of sufficient length. Insufficient data for the in variable may cause errors or crashes. The issue can be exploited by a remote attacker to cause a denial of service.

Recommendations For FreeRDP versions prior to 2.11.0, upgrade to version 2.11.0 or later. For FreeRDP versions prior to 3.0.0-beta3, upgrade to version 3.0.0-beta3 or later. As a temporary workaround, consider disabling the general LumaToYUV444 function until a patch is available.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2024:2208

ALT-PU-2023-5489

ALT-PU-2023-5490

ALT-PU-2023-6067

BDU:2023-05081

CVE-2023-40188

DLA-3606-1

DLA-4053-1

GHSA-9W28-WWJ5-P4XQ

INFSA-2024_2208

MGASA-2023-0318

OESA-2023-1656

OPENSUSE-SU-2023_4893-1

OPENSUSE-SU-2024:13504-1

RHSA-2024:2208

RHSA-2024_2208

SUSE-SU-2023:4611-1

SUSE-SU-2023:4893-1

USN-6401-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Debian

Freerdp

Linuxmint

Red Hat

Suse

Ubuntu

References · 121

• 🔥 https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9w28-wwj5-p4xq · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40188.json · Exploit
• https://ubuntu.com/security/CVE-2023-39351 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2024-2208.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-40569 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-40188 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-40567 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/OH2ATH2BKDNKCJAU4WPPXK4SHLE3UJUV · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-2208.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-40569 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/IHMTGKCZXJPQOR5ZD2I4GPDNP2DKRXMF · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-40188 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-40188 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-39351 · Security Note
• https://ubuntu.com/security/notices/USN-6401-1 · Vendor Advisory