PT-2023-4679 · Freerdp+8 · Freerdp+8

Pwn2Carr · Published 2023-08-28 · Updated 2025-02-15 · CVE-2023-39351

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.11.0 FreeRDP versions prior to 3.0.0-beta3

Description The issue is related to a Null Pointer Dereference in the RemoteFX (rfx) handling of FreeRDP, a free implementation of the Remote Desktop Protocol (RDP). This occurs inside the rfx process message tileset function when the program allocates tiles using rfx allocate tiles for the number of numTiles. If the initialization process of tiles is not completed for various reasons, tiles will have a NULL pointer, which may be accessed in further processing and cause a program crash.

Recommendations For versions prior to 2.11.0, upgrade to version 2.11.0 or later. For versions prior to 3.0.0-beta3, upgrade to version 3.0.0-beta3 or later. As a temporary workaround, consider restricting access to the RemoteFX (rfx) handling until a patch is available.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2024:2208

ALT-PU-2023-5489

ALT-PU-2023-5490

ALT-PU-2023-6067

BDU:2023-05095

CVE-2023-39351

DLA-3606-1

DLA-4053-1

GHSA-Q9X9-CQJC-RGWQ

INFSA-2024_2208

MGASA-2023-0318

OESA-2023-1656

OPENSUSE-SU-2023_4893-1

OPENSUSE-SU-2024:13504-1

RHSA-2024:2208

RHSA-2024_2208

SUSE-SU-2023:4611-1

SUSE-SU-2023:4893-1

USN-6401-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Debian

Freerdp

Linuxmint

Red Hat

Suse

Ubuntu

References · 120

• 🔥 https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q9x9-cqjc-rgwq · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39351.json · Exploit
• https://ubuntu.com/security/CVE-2023-39351 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2024-2208.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-40569 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-05095 · Security Note
• https://ubuntu.com/security/CVE-2023-40567 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/OH2ATH2BKDNKCJAU4WPPXK4SHLE3UJUV · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-39351 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-2208.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-40569 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/IHMTGKCZXJPQOR5ZD2I4GPDNP2DKRXMF · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-39351 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-40188 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-39351 · Vendor Advisory