Lucene search
Redhat.comRH:CVE-2023-40589HistorySep 05, 2023 - 3:14 p.m.
CVE-2023-40589
2023-09-0515:14:48
redhat.com
access.redhat.com
16
freerdp
buffer overflow
ncrush_decompress
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
34.1%
A flaw was found in the FreeRDP implementation. Feeding crafted input into the ncrush_decompress function may cause a buffer overflow, resulting in a crash.
Related
prion
prion
Buffer overflow
2023-08-31 19:15:00
osv
osv
CVE-2023-40589
2023-08-31 19:15:11
freerdp2 vulnerabilities
2023-10-04 11:00:57
Moderate: freerdp security update
2024-04-30 00:00:00
alpinelinux
alpinelinux
CVE-2023-40589
2023-08-31 19:15:11
cve
cve
CVE-2023-40589
2023-08-31 19:15:11
ubuntucve
ubuntucve
CVE-2023-40589
2023-08-31 00:00:00
nvd
nvd
CVE-2023-40589
2023-08-31 19:15:11
debiancve
debiancve
CVE-2023-40589
2023-08-31 19:15:11
cvelist
cvelist
CVE-2023-40589 FreeRDP Global-Buffer-Overflow in ncrush_decompress
2023-08-31 18:31:07
cnvd
cnvd
FreeRDP Buffer Overflow Vulnerability (CNVD-2023-72250)
2023-09-05 00:00:00
veracode
veracode
Buffer Overflow
2023-09-06 02:35:07
mageia
mageia
Updated freerdp packages fix security vulnerabilities
2023-11-15 14:35:09
nessus
nessus
Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : FreeRDP vulnerabilities (USN-6401-1)
2023-10-04 00:00:00
EulerOS 2.0 SP8 : freerdp (EulerOS-SA-2024-1264)
2024-03-12 00:00:00
Amazon Linux 2 : freerdp (ALAS-2023-2269)
2023-10-05 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0318)
2023-11-16 00:00:00
Huawei EulerOS: Security Advisory for freerdp (EulerOS-SA-2024-1264)
2024-03-12 00:00:00
Ubuntu: Security Advisory (USN-6401-1)
2023-10-05 00:00:00
amazon
amazon
Medium: freerdp
2023-09-27 22:48:00
ubuntu
ubuntu
FreeRDP vulnerabilities
2023-10-04 00:00:00
oraclelinux
oraclelinux
freerdp security update
2024-05-02 00:00:00
almalinux
almalinux
Moderate: freerdp security update
2024-04-30 00:00:00
redhat
redhat
(RHSA-2024:2208) Moderate: freerdp security update
2024-04-30 06:15:03
fedora
fedora
[SECURITY] Fedora 37 Update: freerdp-2.11.1-1.fc37
2023-09-21 01:22:07
[SECURITY] Fedora 38 Update: freerdp-2.11.1-1.fc38
2023-09-10 01:21:16
[SECURITY] Fedora 39 Update: freerdp-2.11.1-1.fc39
2023-09-21 00:16:43
gentoo
gentoo
FreeRDP: Multiple Vulnerabilities
2024-01-12 00:00:00
debian
debian
[SECURITY] [DLA 3606-1] freerdp2 security update
2023-10-07 18:09:17
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
34.1%
Related for RH:CVE-2023-40589