CVE-2022-39320 Heap buffer overflow in urbdrc channel
A heap buffer overflow in FreeRDP allows a malicious server to read out-of-bounds data from the client, potentially leading to information disclosure or code execution.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2022-39320?
CVE-2022-39320 is a medium-severity memory corruption vulnerability in Fedoraproject Fedora, published on 16 Nov 2022. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition on too narrow types leads to allocation of a buffer too small holding the data written. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/usb` redirection switch.
Weakness: CWE-125
Which versions are affected by CVE-2022-39320?
It affects 2 products.
Products include Fedoraproject Fedora, Freerdp Freerdp.
How do I fix CVE-2022-39320?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-39320 being exploited?
There is no known exploitation of CVE-2022-39320 in the wild and no public exploit code.
Other vulnerabilities in Fedoraproject Fedora
Sources
Also known as CLEANSTART-2024-MD30847, DEBIAN-CVE-2022-39320, GHSA-qfq2-82qr-7f4j, UBUNTU-CVE-2022-39320.