Skip to content
OpenAdvisories
Medium WID-SEC-2023-2251 17 CVEs

FreeRDP: Mehrere Schwachstellen

Published Sep 3, 2023 · Updated Mar 11, 2026 · Revision 11 · de-DE

Vendor: amazon Vendor: Debian Vendor: Fedora Vendor: gentoo Vendor: SUSE Vendor: Ubuntu Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: openSUSE Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in FreeRDP ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

FreeRDP ist eine freie Implementierung des Remote Desktop Protocol (RDP).

Vulnerabilities 17

  • High 7.3
    CVE-2023-40187

    Use-After-Free in FreeRDP

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of the 3.x beta branch are subject to a Use-After-Free issue in the `avc420_ensure_buffer` and `avc444_ensure_buffer` functions. If the…

    FreeRDP FreeRDP
  • High 7.0
    CVE-2023-39355

    FreeRDP Use-After-Free in RDPGFX_CMDID_RESETGRAPHICS

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Versions of FreeRDP on the 3.x release branch before beta3 are subject to a Use-After-Free in processing `RDPGFX_CMDID_RESETGRAPHICS` packets. If `contex…

    FreeRDP FreeRDP
  • Medium 6.5
    CVE-2023-40186

    IntegerOverflow leading to Out-Of-Bound Write Vulnerability in FreeRDP

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the `gdi_CreateSurface` function. This issue affects F…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 6.5
    CVE-2023-40567

    Out-Of-Bounds Write in FreeRDP

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the `clear_decompress_bands_data` function in which there is no offset validation. Abuse of th…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 6.5
    CVE-2023-40569

    Out-Of-Bounds Write in FreeRDP

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the `progressive_decompress` function. This issue is likely down to incorrect calculations of …

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 6.5
    CVE-2023-40574

    Out-Of-Bounds Write in FreeRDP

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the `writePixelBGRX` function. This issue is likely down to incorrect calculations of the `nHe…

    FreeRDP FreeRDP
  • Medium 5.9
    CVE-2023-39350

    Incorrect offset calculation leading to denial of service in FreeRDP

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. This issue affects Clients only. Integer underflow leading to DOS (e.g. abort due to `WINPR_ASSERT` with default compilation flags). When an insufficient…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 5.9
    CVE-2023-39354

    FreeRDP Out-Of-Bounds Read in nsc_rle_decompress_data

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the `nsc_rle_decompress_data` function. The Out-Of-Bounds Read occurs because it processes `con…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 5.3
    CVE-2023-39351

    FreeRDP Null Pointer Dereference leading denial of service

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of FreeRDP are subject to a Null Pointer Dereference leading a crash in the RemoteFX (rfx) handling. Inside the `rfx_process_message_ti…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 5.3
    CVE-2023-39352

    Invalid offset validation leading to Out Of Bound Write in FreeRDP

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an invalid offset validation leading to Out Of Bound Write. This can be triggered when the values `rect->left` and `rect…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 5.3
    CVE-2023-39353

    Missing offset validation leading to Out Of Bound Read in FreeRDP

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to a missing offset validation leading to Out Of Bound Read. In the `libfreerdp/codec/rfx.c` file there is no offset valida…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 5.3
    CVE-2023-39356

    Missing offset validation leading to Out-of-Bounds Read in FreeRDP

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a missing offset validation may lead to an Out Of Bound Read in the function `gdi_multi_opaque_rect`. In particular there is no code…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 5.3
    CVE-2023-40181

    Integer-Underflow leading to Out-Of-Bound Read in FreeRDP

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Integer-Underflow leading to Out-Of-Bound Read in the `zgfx_decompress_segment` function. In the context of `CopyMemo…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 5.3
    CVE-2023-40188

    Out-Of-Bounds Read in FreeRDP

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the `general_LumaToYUV444` function. This Out-Of-Bounds Read occurs because processing is done …

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 5.3
    CVE-2023-40575

    Out-Of-Bounds Read in FreeRDP

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the `general_YUV444ToRGB_8u_P3AC4R_BGRX` function. This issue is likely down to insufficient da…

    FreeRDP FreeRDP
  • Medium 5.3
    CVE-2023-40576

    Out-Of-Bounds Read in FreeRDP

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the `RleDecompress` function. This Out-Of-Bounds Read occurs because FreeRDP processes the `pbS…

    FreeRDP FreeRDP
  • Medium 4.3
    CVE-2023-40589

    FreeRDP Global-Buffer-Overflow in ncrush_decompress

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions there is a Global-Buffer-Overflow in the ncrush_decompress function. Feeding crafted input into this function can trigger the overfl…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu

Revision history

  1. #11

    Neue Updates von openSUSE aufgenommen

  2. #10

    Neue Updates von Debian aufgenommen

  3. #9

    Neue Updates von Gentoo aufgenommen

  4. #8

    Neue Updates von SUSE aufgenommen

  5. #7

    Neue Updates von Ubuntu aufgenommen

  6. #6

    Neue Updates von SUSE und Ubuntu aufgenommen

  7. #5

    Neue Updates von Debian aufgenommen

  8. #4

    Neue Updates von Amazon aufgenommen

  9. #3

    Neue Updates von Ubuntu aufgenommen

  10. #2

    Neue Updates von Fedora aufgenommen

  11. #1

    Initiale Fassung

References