CVE-2023-40589: FreeRDP Global-Buffer-Overflow in ncrush_decompress

Q: What is CVE-2023-40589?

CVE-2023-40589 is a vulnerability in the FreeRDP software that allows a global buffer overflow in the ncrush_decompress function.

Q: What is the severity of CVE-2023-40589?

CVE-2023-40589 has a severity level of 7.5 (high).

Q: How does CVE-2023-40589 affect FreeRDP?

CVE-2023-40589 affects versions of FreeRDP up to and including 2.11.0 and 3.0.0-beta1 and beta2.

Q: How can I fix CVE-2023-40589?

To fix CVE-2023-40589, you should update to at least version 2.11.2+dfsg1-1 of the freerdp2 package.

Q: Where can I find more information about CVE-2023-40589?

You can find more information about CVE-2023-40589 in the official GitHub commit and security advisories for FreeRDP.

Published Aug 31, 2023

Updated

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions there is a Global-Buffer-Overflow in the ncrushdecompress function. Feeding crafted input into this function can trigger the overflow which has only been shown to cause a crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.

Affected Software

16 affected componentsFixes available

ubuntu/freerdp2<2.2.0+dfsg1-0ubuntu0.18.04.4+

2.2.0+dfsg1-0ubuntu0.18.04.4+

ubuntu/freerdp2<2.2.0+dfsg1-0ubuntu0.20.04.5

2.2.0+dfsg1-0ubuntu0.20.04.5

ubuntu/freerdp2<2.6.1+dfsg1-3ubuntu2.4

2.6.1+dfsg1-3ubuntu2.4

ubuntu/freerdp2<2.10.0+dfsg1-1ubuntu0.2

2.10.0+dfsg1-1ubuntu0.2

ubuntu/freerdp2<2.10.0+dfsg1-1.1ubuntu1

2.10.0+dfsg1-1.1ubuntu1

ubuntu/freerdp2<2.11.0

2.11.0

redhat/freerdp<2.11.0

2.11.0

redhat/freerdp<3.0.0

3.0.0

debian/freerdp2<=2.3.0+dfsg1-2+deb11u1, <=2.10.0+dfsg1-1

2.11.5+dfsg1-12.11.7+dfsg1-2

FreeRDP freerdp<2.11.0

FreeRDP freerdp=3.0.0-beta1

FreeRDP freerdp=3.0.0-beta2

Fedoraproject Fedora=37

Fedoraproject Fedora=38

Fedoraproject Fedora=39

Debian Debian Linux=10.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/freerdp2 to a version that resolves this vulnerability.
Fixed in 2.2.0+dfsg1-0ubuntu0.18.04.4+
Upgrade
Upgrade ubuntu/freerdp2 to a version that resolves this vulnerability.
Fixed in 2.2.0+dfsg1-0ubuntu0.20.04.5
Upgrade
Upgrade ubuntu/freerdp2 to a version that resolves this vulnerability.
Fixed in 2.6.1+dfsg1-3ubuntu2.4
Upgrade
Upgrade ubuntu/freerdp2 to a version that resolves this vulnerability.
Fixed in 2.10.0+dfsg1-1ubuntu0.2
Upgrade
Upgrade ubuntu/freerdp2 to a version that resolves this vulnerability.
Fixed in 2.10.0+dfsg1-1.1ubuntu1
Upgrade
Upgrade ubuntu/freerdp2 to a version that resolves this vulnerability.
Fixed in 2.11.0
Upgrade
Upgrade redhat/freerdp to a version that resolves this vulnerability.
Fixed in 2.11.0
Upgrade
Upgrade redhat/freerdp to a version that resolves this vulnerability.
Fixed in 3.0.0
Upgrade
Upgrade debian/freerdp2 to a version that resolves this vulnerability.
Fixed in 2.11.5+dfsg1-1Fixed in 2.11.7+dfsg1-2
Upgrade
Upgrade FreeRDP to a version that resolves this vulnerability.
Fixed in 2.11.0
Upgrade
Upgrade FreeRDP to a version that resolves this vulnerability.
Fixed in 3.0.0-beta3

Event History

Aug 31, 2023

CVE Published

via Ubuntu·12:00 AM

CVE Published

via MITRE·06:31 PM

Data Sourced

via MITRE·06:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

USN-6401-1

Frequently Asked Questions

What is CVE-2023-40589?

CVE-2023-40589 is a vulnerability in the FreeRDP software that allows a global buffer overflow in the ncrush_decompress function.

What is the severity of CVE-2023-40589?