Skip to content
OpenAdvisories
Medium USN-5734-1 8 CVEs

freerdp2 vulnerabilities

Published Nov 22, 2022 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that FreeRDP incorrectly handled certain data lenghts. A
malicious server could use this issue to cause FreeRDP clients to crash,
resulting in a denial of service, or possibly obtain sensitive information.
This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu
22.04 LTS. (CVE-2022-39282, CVE-2022-39283)

It was discovered that FreeRDP incorrectly handled certain data lenghts. A
malicious server could use this issue to cause FreeRDP clients to crash,
resulting in a denial of service, or possibly obtain sensitive information.
(CVE-2022-39316, CVE-2022-39317, CVE-2022-39318, CVE-2022-39319,
CVE-2022-39320)

It was discovered that FreeRDP incorrectly handled certain path checks. A
malicious server could use this issue to cause FreeRDP clients to read
files outside of the shared directory. (CVE-2022-39347)

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS freerdp2 2.2.0+dfsg1-0ubuntu0.18.04.4
Ubuntu · 20.04 LTS 20.04:LTS freerdp2 2.2.0+dfsg1-0ubuntu0.20.04.4
Ubuntu · 22.04 LTS 22.04:LTS freerdp2 2.6.1+dfsg1-3ubuntu2.3

Vulnerabilities 8

  • Medium 5.9
    CVE-2022-39283

    FreeRDP may read and display out of bounds data

    FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the `/video` command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations are not a…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 5.5
    CVE-2022-39320

    Heap buffer overflow in urbdrc channel

    FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition on too narrow types leads to allocation of a buffer too small holding the data written. A malicious server can trick a FreeRDP based clien…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Medium 4.8
    CVE-2022-39316

    Out of bound read in FreeRDP

    FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGFX decoder component of FreeRDP. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it likely r…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Medium 4.8
    CVE-2022-39318

    Division by zero in urbdrc channel in FreeRDP

    FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input validation in `urbdrc` channel. A malicious server can trick a FreeRDP based client to crash with division by zero. This issue has been addressed in …

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Medium 4.6
    CVE-2022-39317

    Out of bounds read in zgfx decoder in FreeRDP

    FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing a range check for input offset index in ZGFX decoder. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it. T…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Medium 4.6
    CVE-2022-39319

    Missing length validation in urbdrc channel in FreeRDP

    FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in the `urbdrc` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the serv…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Low 3.5
    CVE-2022-39282

    RDP client: Read of uninitialized memory with parallel port redirection

    FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using `/parallel` command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server imple…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Low 2.6
    CVE-2022-39347

    Missing path sanitation with `drive` channel in FreeRDP

    FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicalization and base path check for `drive` channel. A malicious server can trick a FreeRDP based client to read files outside the shared directo…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2022-39282
  • report
    https://ubuntu.com/security/CVE-2022-39283
  • report
    https://ubuntu.com/security/CVE-2022-39316
  • report
    https://ubuntu.com/security/CVE-2022-39317
  • report
    https://ubuntu.com/security/CVE-2022-39318
  • report
    https://ubuntu.com/security/CVE-2022-39319
  • report
    https://ubuntu.com/security/CVE-2022-39320
  • report
    https://ubuntu.com/security/CVE-2022-39347