crítica
CVE-2023-39352
freerdp: invalid offset validation leading to Out Of Bound Write
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Red Hat (media), AlmaLinux (media), Oracle (media), Ubuntu (media).
Descripción
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an invalid offset validation leading to Out Of Bound Write. This can be triggered when the values `rect->left` and `rect->top` are exactly equal to `surface->width` and `surface->height`. eg. `rect->left` == `surface->width` && `rect->top` == `surface->height`. In practice this should cause a crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| alma 9 | freerdp, freerdp-devel, freerdp-libs y 2 más | 2:2.11.2-1.el9 |
| debian 10 | freerdp2 | 2.3.0+dfsg1-2+deb10u3 |
| debian 11 | freerdp2 | 2.3.0+dfsg1-2+deb11u2 |
| debian 12 | freerdp2 | 2.11.7+dfsg1-6~deb12u1 |
| echo | freerdp2 | 2.11.7+dfsg1-6~deb12u1 |
| Oracle Linux 9 | freerdp, freerdp-devel, freerdp-libs y 2 más | 2:2.11.2-1.el9 |
| rapidfort debian 12 | freerdp2 | 0:2.11.7+dfsg1-6~deb12u1 |
| rapidfort debian 13 | freerdp2 | 0:2.11.7+dfsg1-6~deb12u1 |
| rapidfort Oracle Linux 9 | freerdp, freerdp-libs, libwinpr | 2:2.11.2-1.el9 |
| Red Hat | freerdp, freerdp-devel, freerdp-libs y 3 más | sin corrección indicada |
| ubuntu 18.04-ESM | freerdp2 | 2.2.0+dfsg1-0ubuntu0.18.04.4+esm2 |
| ubuntu 20.04 | freerdp2 | 2.2.0+dfsg1-0ubuntu0.20.04.6 |
Mostrar las 31 entradas de 16 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| alma 9 | freerdp | 2:2.11.2-1.el9 |
| alma 9 | freerdp-devel | 2:2.11.2-1.el9 |
| alma 9 | freerdp-libs | 2:2.11.2-1.el9 |
| alma 9 | libwinpr | 2:2.11.2-1.el9 |
| alma 9 | libwinpr-devel | 2:2.11.2-1.el9 |
| debian 10 | freerdp2 | 2.3.0+dfsg1-2+deb10u3 |
| debian 11 | freerdp2 | 2.3.0+dfsg1-2+deb11u2 |
| debian 12 | freerdp2 | 2.11.7+dfsg1-6~deb12u1 |
| echo | freerdp2 | 2.11.7+dfsg1-6~deb12u1 |
| Oracle Linux 9 | freerdp | 2:2.11.2-1.el9 |
| Oracle Linux 9 | freerdp-devel | 2:2.11.2-1.el9 |
| Oracle Linux 9 | freerdp-libs | 2:2.11.2-1.el9 |
| Oracle Linux 9 | libwinpr | 2:2.11.2-1.el9 |
| Oracle Linux 9 | libwinpr-devel | 2:2.11.2-1.el9 |
| rapidfort debian 12 | freerdp2 | 0:2.11.7+dfsg1-6~deb12u1 |
| rapidfort debian 13 | freerdp2 | 0:2.11.7+dfsg1-6~deb12u1 |
| rapidfort Oracle Linux 9 | freerdp | 2:2.11.2-1.el9 |
| rapidfort Oracle Linux 9 | freerdp-libs | 2:2.11.2-1.el9 |
| rapidfort Oracle Linux 9 | libwinpr | 2:2.11.2-1.el9 |
| Red Hat | freerdp | sin corrección indicada |
| Red Hat | freerdp-devel | sin corrección indicada |
| Red Hat | freerdp-libs | sin corrección indicada |
| Red Hat | freerdp-plugins | sin corrección indicada |
| Red Hat | libwinpr | sin corrección indicada |
| Red Hat | libwinpr-devel | sin corrección indicada |
| ubuntu 18.04-ESM | freerdp2 | 2.2.0+dfsg1-0ubuntu0.18.04.4+esm2 |
| ubuntu 20.04 | freerdp2 | 2.2.0+dfsg1-0ubuntu0.20.04.6 |
| ubuntu 20.04-ESM | freerdp2 | 2.2.0+dfsg1-0ubuntu0.20.04.6 |
| ubuntu 22.04 | freerdp2 | 2.6.1+dfsg1-3ubuntu2.5 |
| ubuntu 23.04 | freerdp2 | 2.10.0+dfsg1-1ubuntu0.3 |
| ubuntu 23.10 | freerdp2 | 2.10.0+dfsg1-1.1ubuntu1.1 |
Referencias
- https://access.redhat.com/errata/RHSA-2024:2208
- https://access.redhat.com/security/cve/CVE-2023-39352
- https://bugzilla.redhat.com/2236606
- https://bugzilla.redhat.com/2236650
- https://bugzilla.redhat.com/2236656
- https://bugzilla.redhat.com/2236669
- https://bugzilla.redhat.com/2236730
- https://bugzilla.redhat.com/2236750
Las 29 referencias
- https://bugzilla.redhat.com/2236759
- https://bugzilla.redhat.com/2236763
- https://bugzilla.redhat.com/2236766
- https://bugzilla.redhat.com/2236774
- https://bugzilla.redhat.com/2236779
- https://bugzilla.redhat.com/2236784
- https://errata.almalinux.org/9/ALSA-2024-2208.html
- https://github.com/FreeRDP/FreeRDP/blob/63a2f65618748c12f79ff7450d46c6e194f2db76/libfreerdp/gdi/gfx.c#L1219-L1239
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-whwr-qcf2-2mvj
- https://linux.oracle.com/cve/CVE-2023-39352.html
- https://linux.oracle.com/errata/ELSA-2024-2208.html
- https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
- https://lists.debian.org/debian-lts-announce/2025/02/msg00016.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A6LLDAPEXRDJOM3PREDDD267SSNT77DP/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IHMTGKCZXJPQOR5ZD2I4GPDNP2DKRXMF/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OH2ATH2BKDNKCJAU4WPPXK4SHLE3UJUV/
- https://nvd.nist.gov/vuln/detail/CVE-2023-39352
- https://security.gentoo.org/glsa/202401-16
- https://ubuntu.com/security/notices/USN-6522-1
- https://ubuntu.com/security/notices/USN-6522-2
- https://www.cve.org/CVERecord?id=CVE-2023-39352