CVE-2023-40569: Out-Of-Bounds Write in FreeRDP

Q: What is CVE-2023-40569?

CVE-2023-40569 is an Out-Of-Bounds Write vulnerability in FreeRDP.

Q: How does CVE-2023-40569 impact FreeRDP?

CVE-2023-40569 allows an attacker to write beyond the boundaries of a buffer in the progressive_decompress function, potentially leading to remote code execution.

Q: What is the severity of CVE-2023-40569?

CVE-2023-40569 has a severity rating of 9.8 (Critical).

Q: Which versions of FreeRDP are affected by CVE-2023-40569?

Versions up to and including 2.11.0, 3.0.0-beta1, and 3.0.0-beta2 of FreeRDP are affected by CVE-2023-40569.

Q: How can I fix CVE-2023-40569 in FreeRDP?

To fix CVE-2023-40569, it is recommended to update FreeRDP to a version that includes the relevant security patches.

Published Aug 31, 2023

Updated

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the progressivedecompress function. This issue is likely down to incorrect calculations of the nXSrc and nYSrc variables. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. there are no known workarounds for this vulnerability.

Affected Software

16 affected componentsFixes available

ubuntu/freerdp2<2.2.0+dfsg1-0ubuntu0.18.04.4+

2.2.0+dfsg1-0ubuntu0.18.04.4+

ubuntu/freerdp2<2.2.0+dfsg1-0ubuntu0.20.04.5

2.2.0+dfsg1-0ubuntu0.20.04.5

ubuntu/freerdp2<2.6.1+dfsg1-3ubuntu2.4

2.6.1+dfsg1-3ubuntu2.4

ubuntu/freerdp2<2.10.0+dfsg1-1ubuntu0.2

2.10.0+dfsg1-1ubuntu0.2

ubuntu/freerdp2<2.10.0+dfsg1-1.1ubuntu1

2.10.0+dfsg1-1.1ubuntu1

ubuntu/freerdp2<2.11.0

2.11.0

redhat/freerdp<2.11.0

2.11.0

redhat/freerdp<3.0.0

3.0.0

debian/freerdp2<=2.3.0+dfsg1-2+deb11u1, <=2.10.0+dfsg1-1

2.11.5+dfsg1-12.11.7+dfsg1-2

FreeRDP freerdp<2.11.0

FreeRDP freerdp=3.0.0-beta1

FreeRDP freerdp=3.0.0-beta2

Debian Debian Linux=10.0

Fedoraproject Fedora=37

Fedoraproject Fedora=38

Fedoraproject Fedora=39

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/freerdp2 to a version that resolves this vulnerability.
Fixed in 2.2.0+dfsg1-0ubuntu0.18.04.4+
Upgrade
Upgrade ubuntu/freerdp2 to a version that resolves this vulnerability.
Fixed in 2.2.0+dfsg1-0ubuntu0.20.04.5
Upgrade
Upgrade ubuntu/freerdp2 to a version that resolves this vulnerability.
Fixed in 2.6.1+dfsg1-3ubuntu2.4
Upgrade
Upgrade ubuntu/freerdp2 to a version that resolves this vulnerability.
Fixed in 2.10.0+dfsg1-1ubuntu0.2
Upgrade
Upgrade ubuntu/freerdp2 to a version that resolves this vulnerability.
Fixed in 2.10.0+dfsg1-1.1ubuntu1
Upgrade
Upgrade ubuntu/freerdp2 to a version that resolves this vulnerability.
Fixed in 2.11.0
Upgrade
Upgrade redhat/freerdp to a version that resolves this vulnerability.
Fixed in 2.11.0
Upgrade
Upgrade redhat/freerdp to a version that resolves this vulnerability.
Fixed in 3.0.0
Upgrade
Upgrade debian/freerdp2 to a version that resolves this vulnerability.
Fixed in 2.11.5+dfsg1-1Fixed in 2.11.7+dfsg1-2
Upgrade
Upgrade FreeRDP to a version that resolves this vulnerability.
Fixed in 2.11.0
Upgrade
Upgrade FreeRDP to a version that resolves this vulnerability.
Fixed in 3.0.0-beta3

Event History

Aug 31, 2023

CVE Published

via Ubuntu·12:00 AM

CVE Published

via MITRE·09:41 PM

Data Sourced

via MITRE·09:41 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

USN-6401-1

Frequently Asked Questions

What is CVE-2023-40569?

CVE-2023-40569 is an Out-Of-Bounds Write vulnerability in FreeRDP.

How does CVE-2023-40569 impact FreeRDP?