CVE-2023-39354: FreeRDP Out-Of-Bounds Read in nsc_rle_decompress_data
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the nscrledecompressdata function. The Out-Of-Bounds Read occurs because it processes context->Planes without checking if it contains data of sufficient length. Should an attacker be able to leverage this vulnerability they may be able to cause a crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/freerdp2to a version that resolves this vulnerability.Fixed in 2.2.0+dfsg1-0ubuntu0.18.04.4+ - Upgrade
Upgrade
ubuntu/freerdp2to a version that resolves this vulnerability.Fixed in 2.2.0+dfsg1-0ubuntu0.20.04.5 - Upgrade
Upgrade
ubuntu/freerdp2to a version that resolves this vulnerability.Fixed in 2.6.1+dfsg1-3ubuntu2.4 - Upgrade
Upgrade
ubuntu/freerdp2to a version that resolves this vulnerability.Fixed in 2.10.0+dfsg1-1ubuntu0.2 - Upgrade
Upgrade
ubuntu/freerdp2to a version that resolves this vulnerability.Fixed in 2.10.0+dfsg1-1.1ubuntu1 - Upgrade
Upgrade
ubuntu/freerdp2to a version that resolves this vulnerability.Fixed in 2.11.0 - Upgrade
Upgrade
redhat/freerdpto a version that resolves this vulnerability.Fixed in 2.11.0 - Upgrade
Upgrade
redhat/freerdpto a version that resolves this vulnerability.Fixed in 3.0.0 - Upgrade
Upgrade
debian/freerdp2to a version that resolves this vulnerability.Fixed in 2.11.5+dfsg1-1Fixed in 2.11.7+dfsg1-2 - Upgrade
Upgrade
FreeRDPto a version that resolves this vulnerability.Patch cd1da25a87358eb3b5512fd259310e95b19a05ec
Event History
Frequently Asked Questions
What is CVE-2023-39354?
CVE-2023-39354 is a vulnerability in the FreeRDP software that allows for an Out-of-Bounds Read in the nsc_rle_decompress_data function.
How severe is CVE-2023-39354?
CVE-2023-39354 has a severity rating of 7.5, which is considered high.
Which versions of FreeRDP are affected by CVE-2023-39354?
FreeRDP versions up to and excluding 2.11.0, as well as 3.0.0-beta1 and 3.0.0-beta2, are affected by CVE-2023-39354.
How can I fix CVE-2023-39354?
To fix CVE-2023-39354, update your FreeRDP installation to version 2.11.2+dfsg-1 or later.
What is the Common Weakness Enumeration (CWE) ID for CVE-2023-39354?
The CWE ID for CVE-2023-39354 is CWE-125.