Skip to content
OpenAdvisories
Critical DLA-4070-1 2 CVEs

freerdp2 - security update

Published Feb 27, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 freerdp2 2.3.0+dfsg1-2+deb11u3

Vulnerabilities 2

  • Critical 9.1
    CVE-2022-24882

    Server side NTLM does not properly check parameters in FreeRDP

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server impleme…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 5.5
    CVE-2022-39320

    Heap buffer overflow in urbdrc channel

    FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition on too narrow types leads to allocation of a buffer too small holding the data written. A malicious server can trick a FreeRDP based clien…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine