deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-4678
Published: 2023-08-31
Description: Divide By Zero in GitHub repository gpac/gpac prior to 2.3-DEV.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: https://github.com/gpac/gpac/commit/4607052c482a51dbdacfe1ade10645c181d07b07; https://huntr.dev/bounties/688a4a01-8c18-469d-8cbe-a2e79e80c877; https://github.com/gpac/gpac/commit/4607052c482a51dbdacfe1ade10645c181d07b07
CVE: CVE-2023-4681
Published: 2023-08-31
Description: NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/4bac19ad854159b21ba70d8ab7c4e1cd1db8ea1c; https://huntr.dev/bounties/d67c5619-ab36-41cc-93b7-04828e25f60e; https://github.com/gpac/gpac/commit/4bac19ad854159b21ba70d8ab7c4e1cd1db8ea1c
CVE: CVE-2023-4682
Published: 2023-08-31
Description: Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-122
References: https://github.com/gpac/gpac/commit/b1042c3eefca87c4bc32afb404ed6518d693e5be; https://huntr.dev/bounties/15232a74-e3b8-43f0-ae8a-4e89d56c474c; https://github.com/gpac/gpac/commit/b1042c3eefca87c4bc32afb404ed6518d693e5be
CVE: CVE-2023-4683
Published: 2023-08-31
Description: NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/112767e8b178fc82dec3cf82a1ca14d802cdb8ec; https://huntr.dev/bounties/7852e4d2-af4e-4421-a39e-db23e0549922; https://github.com/gpac/gpac/commit/112767e8b178fc82dec3cf82a1ca14d802cdb8ec
CVE: CVE-2023-41034
Published: 2023-08-31
Description: Eclipse Leshan is a device management server and client Java implementation. In affected versions DDFFileParser` and `DefaultDDFFileValidator` (and so `ObjectLoader`) are vulnerable to `XXE Attacks`. A DDF file is a LWM2M format used to store LWM2M object description. Leshan users are impacted only if they parse untrusted DDF files (e.g. if they let external users provide their own model), in that case they MUST upgrade to fixed version. If you parse only trusted DDF file and validate only with trusted xml schema, upgrading is not mandatory.  This issue has been fixed in versions 1.5.0 and 2.0.0-M13. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: https://github.com/eclipse-leshan/leshan/commit/29577d2879ba8e7674c3b216a7f01193fc7ae013; https://github.com/eclipse-leshan/leshan/commit/4d3e63ac271a817f81fba3e3229c519af7a3049c; https://github.com/eclipse-leshan/leshan/security/advisories/GHSA-wc9j-gc65-3cm7
CVE: CVE-2023-41044
Published: 2023-08-31
Description: Graylog is a free and open log management platform. A partial path traversal vulnerability exists in Graylog's `Support Bundle` feature. The vulnerability is caused by incorrect user input validation in an HTTP API resource. Graylog's Support Bundle feature allows an attacker with valid Admin role credentials to download or delete files in sibling directories of the support bundle directory. The default `data_dir` in operating system packages (DEB, RPM) is set to `/var/lib/graylog-server`. The data directory for the Support Bundle feature is always `<data_dir>/support-bundle`. Due to the partial path traversal vulnerability, an attacker with valid Admin role credentials can read or delete files in directories that start with a `/var/lib/graylog-server/support-bundle` directory name. The vulnerability would allow the download or deletion of files in the following example directories: `/var/lib/graylog-server/support-bundle-test` and `/var/lib/graylog-server/support-bundlesdirectory`. For the Graylog Docker images, the `data_dir` is set to `/usr/share/graylog/data` by default. This vulnerability is fixed in Graylog version 5.1.3 and later. Users are advised to upgrade. Users unable to upgrade should block all HTTP requests to the following HTTP API endpoints by using a reverse proxy server in front of Graylog. `GET /api/system/debug/support/bundle/download/{filename}` and `DELETE /api/system/debug/support/bundle/{filename}`.

CVSS Score: 3.3 (LOW)
CWE: CWE-22
References: https://github.com/Graylog2/graylog2-server/commit/02b8792e6f4b829f0c1d87fcbf2d58b73458b938; https://github.com/Graylog2/graylog2-server/security/advisories/GHSA-2q4p-f6gf-mqr5; https://go2docs.graylog.org/5-1/making_sense_of_your_log_data/cluster_support_bundle.htm
CVE: CVE-2023-41045
Published: 2023-08-31
Description: Graylog is a free and open log management platform. Graylog makes use of only one single source port for DNS queries. Graylog binds a single socket for outgoing DNS queries and while that socket is bound to a random port number it is never changed again. This goes against recommended practice since 2008, when Dan Kaminsky discovered how easy is to carry out DNS cache poisoning attacks. In order to prevent cache poisoning with spoofed DNS responses, it is necessary to maximise the uncertainty in the choice of a source port for a DNS query. Although unlikely in many setups, an external attacker could inject forged DNS responses into a Graylog's lookup table cache. In order to prevent this, it is at least recommendable to distribute the DNS queries through a pool of distinct sockets, each of them with a random source port and renew them periodically. This issue has been addressed in versions 5.0.9 and 5.1.3. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 3.7 (LOW)
CWE: CWE-345
References: https://github.com/Graylog2/graylog2-server/commit/466af814523cffae9fbc7e77bab7472988f03c3e; https://github.com/Graylog2/graylog2-server/commit/a101f4f12180fd3dfa7d3345188a099877a3c327; https://github.com/Graylog2/graylog2-server/security/advisories/GHSA-g96c-x7rh-99r3
CVE: CVE-2023-41745
Published: 2023-08-31
Description: Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 30991, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200, CWE-668
References: https://security-advisory.acronis.com/advisories/SEC-2008; https://security-advisory.acronis.com/advisories/SEC-2008
CVE: CVE-2023-41746
Published: 2023-08-31
Description: Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager (Windows) before build 6.2.23089.203.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-20
References: https://security-advisory.acronis.com/advisories/SEC-5810; https://security-advisory.acronis.com/advisories/SEC-5810
CVE: CVE-2023-41747
Published: 2023-08-31
Description: Sensitive information disclosure due to unauthenticated path traversal. The following products are affected: Acronis Cloud Manager (Windows) before build 6.2.23089.203.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://security-advisory.acronis.com/advisories/SEC-5811; https://security-advisory.acronis.com/advisories/SEC-5811
CVE: CVE-2023-41748
Published: 2023-08-31
Description: Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager (Windows) before build 6.2.23089.203.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-20
References: https://security-advisory.acronis.com/advisories/SEC-5816; https://security-advisory.acronis.com/advisories/SEC-5816
CVE: CVE-2022-40214
Published: 2023-08-31
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2022. Notes: none.
CVE: CVE-2023-40589
Published: 2023-08-31
Description: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions there is a Global-Buffer-Overflow in the ncrush_decompress function. Feeding crafted input into this function can trigger the overflow which has only been shown to cause a crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-120
References: https://github.com/FreeRDP/FreeRDP/commit/16141a30f983dd6f7a6e5b[PII_REDACTED]942c9416; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-gc34-mw6m-g42x; https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE: CVE-2022-46869
Published: 2023-08-31
Description: Local privilege escalation during installation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40278, Acronis True Image OEM (Windows) before build 42575.
CVSS Score: 7.8 (HIGH)
CWE: CWE-610, CWE-59
References: https://security-advisory.acronis.com/advisories/SEC-3835; https://security-advisory.acronis.com/advisories/SEC-3835
CVE: CVE-2023-39350
Published: 2023-08-31
Description: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. This issue affects Clients only. Integer underflow leading to DOS (e.g. abort due to `WINPR_ASSERT` with default compilation flags). When an insufficient blockLen is provided, and proper length validation is not performed, an Integer Underflow occurs, leading to a Denial of Service (DOS) vulnerability. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-191, CWE-191
References: https://github.com/FreeRDP/FreeRDP/commit/e204fc8be5a372626b13f66daf2abafe71dbc2dc; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rrrv-3w42-pffh; https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE: CVE-2023-39351
Published: 2023-08-31
Description: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of FreeRDP are subject to a Null Pointer Dereference leading a crash in the RemoteFX (rfx) handling.  Inside the `rfx_process_message_tileset` function, the program allocates tiles using `rfx_allocate_tiles` for the number of numTiles. If the initialization process of tiles is not completed for various reasons, tiles will have a NULL pointer. Which may be accessed in further processing and would cause a program crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-476
References: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q9x9-cqjc-rgwq; https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A6LLDAPEXRDJOM3PREDDD267SSNT77DP/
CVE: CVE-2023-39354
Published: 2023-08-31
Description: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the `nsc_rle_decompress_data` function. The Out-Of-Bounds Read occurs because it processes `context->Planes` without  checking if it contains data of sufficient length. Should an attacker be able to leverage this vulnerability they may be able to cause a crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125
References: https://github.com/FreeRDP/FreeRDP/commit/cd1da25a87358eb3b5512fd259310e95b19a05ec; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c3r2-pxxp-f8r6; https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE: CVE-2023-39355
Published: 2023-08-31
Description: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Versions of FreeRDP on the 3.x release branch before beta3 are subject to a Use-After-Free in processing `RDPGFX_CMDID_RESETGRAPHICS` packets. If `context->maxPlaneSize` is 0, `context->planesBuffer` will be freed. However, without updating `context->planesBuffer`, this leads to a Use-After-Free exploit vector. In most environments this should only result in a crash. This issue has been addressed in version 3.0.0-beta3 and users of the beta 3.x releases are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://github.com/FreeRDP/FreeRDP/commit/d6f9d33a7db0b346195b6a15b5b99944ba41beee; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hvwj-vmg6-2f5h; https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE: CVE-2023-39352
Published: 2023-08-31
Description: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an invalid offset validation leading to Out Of Bound Write. This can be triggered when the values `rect->left` and `rect->top` are exactly equal to `surface->width` and  `surface->height`. eg. `rect->left` == `surface->width` && `rect->top` == `surface->height`. In practice this should cause a crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://github.com/FreeRDP/FreeRDP/blob/63a2f65618748c12f79ff7450d46c6e194f2db76/libfreerdp/gdi/gfx.c#L1219-L1239; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-whwr-qcf2-2mvj; https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE: CVE-2023-39353
Published: 2023-08-31
Description: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to a missing offset validation leading to Out Of Bound Read. In the `libfreerdp/codec/rfx.c` file there is no offset validation in `tile->quantIdxY`, `tile->quantIdxCb`, and `tile->quantIdxCr`. As a result crafted input can lead to an out of bounds read access which in turn will cause a crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: https://github.com/FreeRDP/FreeRDP/blob/63a2f65618748c12f79ff7450d46c6e194f2db76/libfreerdp/codec/rfx.c#L994-L996; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hg53-9j9h-3c8f; https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE: CVE-2023-39356
Published: 2023-08-31
Description: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a missing offset validation may lead to an Out Of Bound Read in the function `gdi_multi_opaque_rect`. In particular there is no code to validate if the value `multi_opaque_rect->numRectangles` is less than 45. Looping through `multi_opaque_rect->`numRectangles without proper boundary checks can lead to Out-of-Bounds Read errors which will likely lead to a crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://github.com/FreeRDP/FreeRDP/blob/63a2f65618748c12f79ff7450d46c6e194f2db76/include/freerdp/primary.h#L186-L196; https://github.com/FreeRDP/FreeRDP/blob/63a2f65618748c12f79ff7450d46c6e194f2db76/libfreerdp/core/orders.c#L1503-L1504; https://github.com/FreeRDP/FreeRDP/blob/63a2f65618748c12f79ff7450d46c6e194f2db76/libfreerdp/gdi/gdi.c#L723C1-L758
CVE: CVE-2023-41749
Published: 2023-08-31
Description: Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (Windows) before build 32047, Acronis Cyber Protect 15 (Windows) before build 35979.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://security-advisory.acronis.com/advisories/SEC-5287; https://security-advisory.acronis.com/advisories/SEC-5287
CVE: CVE-2023-41750
Published: 2023-08-31
Description: Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 32047.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://security-advisory.acronis.com/advisories/SEC-5382; https://security-advisory.acronis.com/advisories/SEC-5382
CVE: CVE-2023-41751
Published: 2023-08-31
Description: Sensitive information disclosure due to improper token expiration validation. The following products are affected: Acronis Agent (Windows) before build 32047.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://security-advisory.acronis.com/advisories/SEC-5615; https://security-advisory.acronis.com/advisories/SEC-5615
CVE: CVE-2023-4299
Published: 2023-08-31
Description: 
Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.


CVSS Score: 9.0 (CRITICAL)
CWE: CWE-836
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-04; https://www.digi.com/getattachment/resources/security/alerts/realport-cves/Dragos-Disclosure-Statement.pdf; https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-04
CVE: CVE-2023-4688
Published: 2023-08-31
Description: Sensitive information leak through log files. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 35433.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://security-advisory.acronis.com/advisories/SEC-5782; https://security-advisory.acronis.com/advisories/SEC-5782
CVE: CVE-2023-40181
Published: 2023-08-31
Description: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Integer-Underflow leading to Out-Of-Bound Read in the `zgfx_decompress_segment` function. In the context of `CopyMemory`, it's possible to read data beyond the transmitted packet range and likely cause a crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125, CWE-191
References: https://github.com/FreeRDP/FreeRDP/blob/2252d53001d9ce8a452f0a0a5b1f5ed9db6d57f1/libfreerdp/codec/zgfx.c#L256-L261; https://github.com/FreeRDP/FreeRDP/blob/2252d53001d9ce8a452f0a0a5b1f5ed9db6d57f1/libfreerdp/codec/zgfx.c#L334-L355; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mxp4-rx7x-h2g8
CVE: CVE-2023-40186
Published: 2023-08-31
Description: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the `gdi_CreateSurface` function. This issue affects FreeRDP based clients only. FreeRDP proxies are not affected as image decoding is not done by a proxy. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190, CWE-787, CWE-190, CWE-787
References: https://github.com/FreeRDP/FreeRDP/blob/fee2b10ba1154f952769a53eb608f044782e22f8/libfreerdp/gdi/gfx.c#L1156-L1165; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hcj4-3c3r-5j3v; https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE: CVE-2023-40187
Published: 2023-08-31
Description: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of the 3.x beta branch are subject to a Use-After-Free issue in the `avc420_ensure_buffer` and `avc444_ensure_buffer` functions. If the value of `piDstSize[x]` is 0, `ppYUVDstData[x]` will be freed. However, in this case `ppYUVDstData[x]` will not have been updated which leads to a Use-After-Free vulnerability. This issue has been addressed in version 3.0.0-beta3. Users of the 3.x beta releases are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-416, CWE-416
References: https://github.com/FreeRDP/FreeRDP/blob/5be5553e0da72178a4b94cc1ffbdace9ceb153e5/libfreerdp/codec/h264.c#L413-L427; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pwf9-v5p9-ch4f; https://security.gentoo.org/glsa/202401-16
CVE: CVE-2023-40188
Published: 2023-08-31
Description: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the `general_LumaToYUV444` function. This Out-Of-Bounds Read occurs because processing is done on the `in` variable without checking if it contains data of sufficient length. Insufficient data for the `in` variable may cause errors or crashes. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: https://github.com/FreeRDP/FreeRDP/blob/5be5553e0da72178a4b94cc1ffbdace9ceb153e5/libfreerdp/codec/nsc.c#L115-L175; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9w28-wwj5-p4xq; https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE: CVE-2023-40567
Published: 2023-08-31
Description: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the `clear_decompress_bands_data` function in which there is no offset validation. Abuse of this vulnerability may lead to an out of bounds write. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. there are no known workarounds for this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/FreeRDP/FreeRDP/blob/5be5553e0da72178a4b94cc1ffbdace9ceb153e5/libfreerdp/codec/clear.c#L612-L618; https://github.com/FreeRDP/FreeRDP/blob/5be5553e0da72178a4b94cc1ffbdace9ceb153e5/libfreerdp/codec/clear.c#L843-L845; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2w9f-8wg4-8jfp
CVE: CVE-2023-40569
Published: 2023-08-31
Description: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the `progressive_decompress` function. This issue is likely down to incorrect calculations of the `nXSrc` and `nYSrc` variables. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. there are no known workarounds for this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/FreeRDP/FreeRDP/blob/5be5553e0da72178a4b94cc1ffbdace9ceb153e5/libfreerdp/codec/progressive.c#L2598-L2616; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hm8c-rcjg-c8qp; https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE: CVE-2023-40574
Published: 2023-08-31
Description: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the `writePixelBGRX` function. This issue is likely down to incorrect calculations of the `nHeight` and `srcStep` variables. This issue has been addressed in version 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/FreeRDP/FreeRDP/blob/5be5553e0da72178a4b94cc1ffbdace9ceb153e5/libfreerdp/primitives/prim_YUV.c#L414-L445; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-422p-gj6x-93cw; https://security.gentoo.org/glsa/202401-16