USN-6401-1: FreeRDP vulnerabilities
It was discovered that FreeRDP did not properly manage certain inputs. A malicious server could use this issue to cause FreeRDP clients to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2023-39350, CVE-2023-39351, CVE-2023-39353, CVE-2023-39354, CVE-2023-40181, CVE-2023-40188, CVE-2023-40589) It was discovered that FreeRDP did not properly manage certain inputs. A malicious server could use this issue to cause FreeRDP clients to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-40186, CVE-2023-40567, CVE-2023-40569)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this advisory?
The vulnerability ID for this advisory is USN-6401-1.
What is the severity of the FreeRDP vulnerabilities?
The severity of the FreeRDP vulnerabilities is not specified in the provided information.
What is the affected software?
The affected software is libfreerdp2-2, libwinpr2-2, libwinpr2-dev, on Ubuntu versions 23.04, 22.04, 20.04, and 18.04.
How do I fix the FreeRDP vulnerabilities?
To fix the FreeRDP vulnerabilities, update the libfreerdp2-2, libwinpr2-2, and libwinpr2-dev packages to the specified versions.
Where can I find more information about the FreeRDP vulnerabilities?
You can find more information about the FreeRDP vulnerabilities in the provided references: [CVE-2023-39351](https://ubuntu.com/security/CVE-2023-39351), [CVE-2023-40186](https://ubuntu.com/security/CVE-2023-40186), [CVE-2023-40569](https://ubuntu.com/security/CVE-2023-40569).