FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. This issue affects Clients only. Integer underflow leading to DOS (e.g. abort due to `WINPR_ASSERT` with default compilation flags). When an insufficient blockLen is provided, and proper length validation is not performed, an Integer Underflow occurs, leading to a Denial of Service (DOS) vulnerability. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this vulnerability.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2023-08-31T19:31:13.392Z

Updated: 2024-08-02T18:10:20.229Z

Reserved: 2023-07-28T13:26:46.477Z

Link: CVE-2023-39350

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-08-31T20:15:08.170

Modified: 2024-11-21T08:15:12.770

Link: CVE-2023-39350

cve-icon Redhat

Severity : Moderate

Publid Date: 2023-08-31T00:00:00Z

Links: CVE-2023-39350 - Bugzilla