CVE-2022-39317 Out of bounds read in zgfx decoder in FreeRDP

2022-11-1600:00:00

CWE-125

GitHub_M

www.cve.org

cve-2022-39317; freerdp; zgfx; out of bounds read; security issue; remote desktop protocol; version 2.9.0; missing range check; malicious server; data decoding

CVSS3

4.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

48.9%

JSON

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing a range check for input offset index in ZGFX decoder. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it. This issue has been addressed in version 2.9.0. There are no known workarounds for this issue.

CNA Affected

[
  {
    "vendor": "FreeRDP",
    "product": "FreeRDP",
    "versions": [
      {
        "version": "< 2.9.0",
        "status": "affected"
      }
    ]
  }
]