Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-40576 EUVD-2023-45144

Out-Of-Bounds Read in FreeRDP

Published Aug 31, 2023 · Updated Feb 13, 2025 · Assigned by GitHub_M

Vendor: FreeRDP Product: FreeRDP

Description

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the `RleDecompress` function. This Out-Of-Bounds Read occurs because FreeRDP processes the `pbSrcBuffer` variable without checking if it contains data of sufficient length. Insufficient data in the `pbSrcBuffer` variable may cause errors or crashes. This issue has been addressed in version 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.

Affected products

VendorProductAffectedFixed
FreeRDP FreeRDP >= 3.0.0-beta1, < 3.0.0-beta3 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP5 freerdp 2.4.0-150400.3.23.1 SUSE-SU-2023:4893-1
SLES 15 SP4 freerdp 2.4.0-150400.3.23.1 SUSE-SU-2023:4893-1
SLES 12 SP5 freerdp 2.1.2-12.38.1 SUSE-SU-2023:4611-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed freerdp 3.4.0-1.1 openSUSE-SU-2024:13815-1
openSUSE Tumbleweed freerdp2 2.11.5-1.1 openSUSE-SU-2024:13816-1
openSUSE Leap 16.0 freerdp 3.22.0-160000.1.1 openSUSE-SU-2026:20339-1
openSUSE Leap 15.5 freerdp 2.4.0-150400.3.23.1 SUSE-SU-2023:4893-1
openSUSE Leap 15.4 freerdp 2.4.0-150400.3.23.1 SUSE-SU-2023:4893-1

Advisories 6

References