Lucene search
PRIOn knowledge basePRION:CVE-2023-40576HistoryAug 31, 2023 - 10:15 p.m.
Out-of-bounds
2023-08-3122:15:00
PRIOn knowledge base
www.prio-n.com
8
freerdp
rdp
out-of-bounds
read
vulnerability
rledecompress
apache license
upgrade
nvd
0.001 Low
EPSS
Percentile
21.4%
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the RleDecompress function. This Out-Of-Bounds Read occurs because FreeRDP processes the pbSrcBuffer variable without checking if it contains data of sufficient length. Insufficient data in the pbSrcBuffer variable may cause errors or crashes. This issue has been addressed in version 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.
| CPE | Name | Operator | Version |
|---|---|---|---|
| freerdp | eq | 3.0.0 beta1 | |
| freerdp | eq | 3.0.0 beta2 |
Related
cvelist
cvelist
CVE-2023-40576 Out-Of-Bounds Read in FreeRDP
2023-08-31 21:35:38
cve
cve
CVE-2023-40576
2023-08-31 22:15:08
redhatcve
redhatcve
CVE-2023-40576
2023-09-05 15:14:42
veracode
veracode
Out-of-bounds Read
2023-09-11 10:45:03
nvd
nvd
CVE-2023-40576
2023-08-31 22:15:08
debiancve
debiancve
CVE-2023-40576
2023-08-31 22:15:08
osv
osv
CVE-2023-40576
2023-08-31 22:15:08
ubuntucve
ubuntucve
CVE-2023-40576
2023-08-31 00:00:00
openvas
openvas
openSUSE: Security Advisory for freerdp (SUSE-SU-2023:4893-1)
2024-03-04 00:00:00
nessus
nessus
SUSE SLED12 / SLES12 Security Update : freerdp (SUSE-SU-2023:4611-1)
2023-11-30 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : freerdp (SUSE-SU-2023:4893-1)
2023-12-19 00:00:00
GLSA-202401-16 : FreeRDP: Multiple Vulnerabilities
2024-01-12 00:00:00
gentoo
gentoo
FreeRDP: Multiple Vulnerabilities
2024-01-12 00:00:00