CVE-2023-40569

CVSS 3.1 Score 9.8 of 10 (high)

Attack Complexity low
Confidentiality high
Integrity high
Availability high
Scope unchanged
Privileges Required none

Details

Published Aug 31, 2023
Updated: Jan 12, 2024
CWE ID 787

Summary

CVE-2023-40569 is a vulnerability affecting FreeRDP, an open-source Remote Desktop Protocol implementation. The affected versions contain an Out-Of-Bounds Write issue in the `progressive_decompress` function. This vulnerability is believed to stem from incorrect calculations of the `nXSrc` and `nYSrc` variables. The vulnerability has been resolved in versions 2.11.0 and 3.0.0-beta3. It is strongly recommended that users upgrade to these versions to mitigate the risk. No known workarounds are available for this issue.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • FreeRDP
  • Fedora Operating System
  • Debian

Affected Vendors

  • Debian
  • Fedora Project
  • Freerdp