CVE-2023-39354: FreeRDP Out-Of-Bounds Read in nsc_rle_decompress_data
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the nscrledecompressdata function. The Out-Of-Bounds Read occurs because it processes context->Planes without checking if it contains data of sufficient length. Should an attacker be able to leverage this vulnerability they may be able to cause a crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2023-39354?
CVE-2023-39354 is a vulnerability in the FreeRDP software that allows for an Out-of-Bounds Read in the nsc_rle_decompress_data function.
How severe is CVE-2023-39354?
CVE-2023-39354 has a severity rating of 7.5, which is considered high.
Which versions of FreeRDP are affected by CVE-2023-39354?
FreeRDP versions up to and excluding 2.11.0, as well as 3.0.0-beta1 and 3.0.0-beta2, are affected by CVE-2023-39354.
How can I fix CVE-2023-39354?
To fix CVE-2023-39354, update your FreeRDP installation to version 2.11.2+dfsg-1 or later.
What is the Common Weakness Enumeration (CWE) ID for CVE-2023-39354?
The CWE ID for CVE-2023-39354 is CWE-125.