Skip to content
OpenAdvisories
Medium RHSA-2023:2326 9 CVEs

Red Hat Security Advisory: freerdp security update

Published Sep 16, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 13

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream freerdp 2:2.4.1-5.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream freerdp-debuginfo 2:2.4.1-5.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream freerdp-debugsource 2:2.4.1-5.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream freerdp-libs 2:2.4.1-5.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream freerdp-libs-debuginfo 2:2.4.1-5.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream libwinpr 2:2.4.1-5.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream libwinpr-debuginfo 2:2.4.1-5.el9
Red Hat · RHEL 9 enterprise_linux:9::crb freerdp-debuginfo 2:2.4.1-5.el9
Red Hat · RHEL 9 enterprise_linux:9::crb freerdp-debugsource 2:2.4.1-5.el9
Red Hat · RHEL 9 enterprise_linux:9::crb freerdp-devel 2:2.4.1-5.el9
Red Hat · RHEL 9 enterprise_linux:9::crb freerdp-libs-debuginfo 2:2.4.1-5.el9
Red Hat · RHEL 9 enterprise_linux:9::crb libwinpr-debuginfo 2:2.4.1-5.el9
Red Hat · RHEL 9 enterprise_linux:9::crb libwinpr-devel 2:2.4.1-5.el9

Vulnerabilities 9

  • Medium 5.9
    CVE-2022-39283

    FreeRDP may read and display out of bounds data

    FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the `/video` command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations are not a…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 5.5
    CVE-2022-39320

    Heap buffer overflow in urbdrc channel

    FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition on too narrow types leads to allocation of a buffer too small holding the data written. A malicious server can trick a FreeRDP based clien…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Medium 4.8
    CVE-2022-39316

    Out of bound read in FreeRDP

    FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGFX decoder component of FreeRDP. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it likely r…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Medium 4.8
    CVE-2022-39318

    Division by zero in urbdrc channel in FreeRDP

    FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input validation in `urbdrc` channel. A malicious server can trick a FreeRDP based client to crash with division by zero. This issue has been addressed in …

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Medium 4.6
    CVE-2022-39317

    Out of bounds read in zgfx decoder in FreeRDP

    FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing a range check for input offset index in ZGFX decoder. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it. T…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Medium 4.6
    CVE-2022-39319

    Missing length validation in urbdrc channel in FreeRDP

    FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in the `urbdrc` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the serv…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Medium 4.6
    CVE-2022-41877

    Missing input length validation in `drive` channel in FreeRDP

    FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in `drive` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. T…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Low 3.5
    CVE-2022-39282

    RDP client: Read of uninitialized memory with parallel port redirection

    FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using `/parallel` command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server imple…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Low 2.6
    CVE-2022-39347

    Missing path sanitation with `drive` channel in FreeRDP

    FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicalization and base path check for `drive` channel. A malicious server can trick a FreeRDP based client to read files outside the shared directo…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2134713
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2134717
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2143642
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2143643
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2143644
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2143645
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2143646
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2143647
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2143648
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2326.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-39282
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-39282
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-39282
  • article
    https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c45q-wcpg-mxjq
  • report
    https://access.redhat.com/security/cve/CVE-2022-39283
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-39283
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-39283
  • article
    https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6cf9-3328-qrvh
  • report
    https://access.redhat.com/security/cve/CVE-2022-39316
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-39316
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-39316
  • article
    https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5w4j-mrrh-jjrm
  • report
    https://access.redhat.com/security/cve/CVE-2022-39317
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-39317
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-39317
  • article
    https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-99cm-4gw7-c8jh
  • report
    https://access.redhat.com/security/cve/CVE-2022-39318
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-39318
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-39318
  • article
    https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-387j-8j96-7q35
  • report
    https://access.redhat.com/security/cve/CVE-2022-39319
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-39319
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-39319
  • article
    https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mvxm-wfj2-5fvh
  • report
    https://access.redhat.com/security/cve/CVE-2022-39320
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-39320
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-39320