CVE catalog

CVE-2023-39353

freerdp2: CVE-2023-39353

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
1.48% · Oct 25, 2026

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to a missing offset validation leading to Out Of Bound Read. In the `libfreerdp/codec/rfx.c` file there is no offset validation in `tile->quantIdxY`, `tile->quantIdxCb`, and `tile->quantIdxCr`. As a result crafted input can lead to an out of bounds read access which in turn will cause a crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianfreerdp2bookworm2.11.7+dfsg1-6~deb12u1fixed
Ubuntufreerdp2pro2.0.0~git20170725.1.1648deb+dfsg1-1vulnerable
Ubuntufreerdp2pro2.0.0~git20170725.1.1648deb+dfsg1-5vulnerable
Ubuntufreerdp2pro2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu1vulnerable
Ubuntufreerdp2pro2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu2vulnerable
Ubuntufreerdp2pro2.0.0~git20170725.1.1648deb+dfsg1-6vulnerable
Ubuntufreerdp2pro2.0.0~git20170725.1.1648deb+dfsg1-6build1vulnerable
Ubuntufreerdp2pro2.0.0~git20170725.1.1648deb+dfsg1-7vulnerable
Ubuntufreerdp2pro2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1vulnerable
Ubuntufreerdp2pro2.1.1+dfsg1-0ubuntu0.18.04.1vulnerable
Ubuntufreerdp2pro2.2.0+dfsg1-0ubuntu0.18.04.1vulnerable
Ubuntufreerdp2pro2.2.0+dfsg1-0ubuntu0.18.04.2vulnerable
Ubuntufreerdp2pro2.2.0+dfsg1-0ubuntu0.18.04.3vulnerable
Ubuntufreerdp2pro2.2.0+dfsg1-0ubuntu0.18.04.4vulnerable
Ubuntufreerdp2pro2.2.0+dfsg1-0ubuntu0.18.04.4+esm1fixed
Ubuntufreerdp220.042.0.0~git20190204.1.2693389a+dfsg1-1vulnerable
Ubuntufreerdp220.042.0.0~git20190204.1.2693389a+dfsg1-2vulnerable
Ubuntufreerdp220.042.0.0~git20190204.1.2693389a+dfsg1-2build1vulnerable
Ubuntufreerdp220.042.0.0~git20190204.1.2693389a+dfsg1-2build2vulnerable
Ubuntufreerdp220.042.1.1+dfsg1-0ubuntu0.20.04.1vulnerable
Ubuntufreerdp220.042.2.0+dfsg1-0ubuntu0.20.04.1vulnerable
Ubuntufreerdp220.042.2.0+dfsg1-0ubuntu0.20.04.2vulnerable
Ubuntufreerdp220.042.2.0+dfsg1-0ubuntu0.20.04.3vulnerable
Ubuntufreerdp220.042.2.0+dfsg1-0ubuntu0.20.04.4vulnerable
Ubuntufreerdp220.042.2.0+dfsg1-0ubuntu0.20.04.5fixed
Ubuntufreerdp222.042.3.0+dfsg1-2build1vulnerable
Ubuntufreerdp222.042.3.0+dfsg1-2ubuntu1vulnerable
Ubuntufreerdp222.042.3.0+dfsg1-2ubuntu2vulnerable
Ubuntufreerdp222.042.4.1+dfsg1-1vulnerable
Ubuntufreerdp222.042.4.1+dfsg1-1ubuntu1vulnerable
Ubuntufreerdp222.042.4.1+dfsg1-1ubuntu2vulnerable
Ubuntufreerdp222.042.5.0+dfsg1-1vulnerable
Ubuntufreerdp222.042.6.0+dfsg1-1vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-1vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3ubuntu1vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3ubuntu2vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3ubuntu2.1vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3ubuntu2.2vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3ubuntu2.3vulnerable
Ubuntufreerdp222.042.6.1+dfsg1-3ubuntu2.4fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianfreerdp2sourcebookworm2.11.7+dfsg1-6~deb12u1not yet assignedNot reported[1051638]
Ubuntufreerdp2debpro2.2.0+dfsg1-0ubuntu0.18.04.4+esm1Not reportedUBUNTU-CVE-2023-39353Not reported
Ubuntufreerdp2deb20.042.2.0+dfsg1-0ubuntu0.20.04.5Not reportedUBUNTU-CVE-2023-39353Not reported
Ubuntufreerdp2deb22.042.6.1+dfsg1-3ubuntu2.4Not reportedUBUNTU-CVE-2023-39353Not reported

[Debian bug #1051638]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]