The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In FreeRDP less than or equal to 2.1.2, an integer overflow exists due to missing input sanitation in rdpegfx channel. All FreeRDP clients are affected. The input rectangles from the server are not checked against local surface coordinates and blindly accepted. A malicious server can send data that will crash the client later on (invalid length arguments to a `memcpy`) This has been fixed in 2.2.0. As a workaround, stop using command line arguments /gfx, /gfx-h264 and /network:auto
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freerdp-devel | May 4, 2022 | Jul 27, 2020 |
| Alpine Linux | — | Upgrade freerdpUpgrade freerdp2 | Aug 22, 2024 | Jul 27, 2020 |
| Centos_linux | — | Upgrade libwinpr-debuginfoUpgrade libwinpr-develUpgrade freerdpUpgrade freerdp-debugsourceUpgrade freerdp-libsUpgrade freerdp-libs-debuginfoUpgrade freerdp-debuginfoUpgrade libwinpr | Jun 1, 2021 | Jul 27, 2020 |
| Debian | — | Upgrade freerdp2 | Oct 10, 2023 | Jul 27, 2020 |
| Freebsd | — | Upgrade freerdp | Jul 29, 2020 | Jul 28, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freerdpUpgrade libwinprUpgrade freerdp-libs | Apr 26, 2022 | Jul 27, 2020 |
| Oracle_linux | — | Upgrade freerdp-libsUpgrade freerdp-develUpgrade libwinprUpgrade libwinpr-develUpgrade freerdp | May 26, 2021 | Jul 20, 2020 |
| Redhat_linux | — | Upgrade freerdp-debugsourceUpgrade freerdpUpgrade libwinpr-develUpgrade freerdp-debuginfoUpgrade freerdp-libsUpgrade freerdp-develNo solution existsUpgrade freerdp-libs-debuginfoUpgrade libwinprUpgrade libwinpr-debuginfo | May 21, 2021 | Jul 27, 2020 |
| Rocky_linux | — | Upgrade freerdp-libsUpgrade libwinprUpgrade freerdp-libs-debuginfoUpgrade libwinpr-debuginfoUpgrade freerdp-develUpgrade freerdp-debuginfoUpgrade freerdp-debugsourceUpgrade libwinpr-develUpgrade freerdp | Mar 12, 2024 | Jul 27, 2020 |
| Suse | — | Upgrade libuwac0-0Upgrade vinagreUpgrade winpr2-develUpgrade libfreerdp2Upgrade vinagre-langUpgrade uwac0-0-develUpgrade freerdp-proxyUpgrade freerdp-waylandUpgrade freerdpUpgrade libwinpr2Upgrade freerdp-develUpgrade freerdp-server | Aug 20, 2020 | Jul 27, 2020 |
| Ubuntu | — | Upgrade libfreerdp-client2-2Upgrade libfreerdp-server2-2Upgrade libfreerdp2-2 | Sep 2, 2020 | Jul 27, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub