FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the `/video` command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations are not affected. This issue has been patched in version 2.8.1. If you cannot upgrade do not use the `/video` switch.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libwinpr-develUpgrade freerdp-develUpgrade freerdpUpgrade freerdp-libsUpgrade libwinpr | May 15, 2023 | Oct 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade libwinprUpgrade libwinpr-develUpgrade freerdpUpgrade freerdp-libsUpgrade freerdp-debuginfoUpgrade freerdp-devel | Feb 7, 2023 | Oct 12, 2022 |
| Centos_linux | — | Upgrade libwinpr-develUpgrade freerdpUpgrade freerdp-libs-debuginfoUpgrade freerdp-debuginfoUpgrade freerdp-debugsourceUpgrade freerdp-libsUpgrade libwinpr-debuginfoUpgrade libwinpr | May 15, 2023 | Oct 12, 2022 |
| Debian | — | Upgrade freerdp2 | Nov 20, 2023 | Oct 12, 2022 |
| Freebsd | — | Upgrade freerdp | Feb 25, 2023 | Feb 24, 2023 |
| Gentoo Linux | — | Upgrade net-misc/freerdp. | Oct 31, 2022 | Oct 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libwinprUpgrade freerdpUpgrade freerdp-libs | Feb 9, 2023 | Oct 12, 2022 |
| Oracle_linux | — | Upgrade libwinprUpgrade freerdp-libsUpgrade libwinpr-develUpgrade freerdpUpgrade freerdp-devel | May 18, 2023 | Oct 13, 2022 |
| Redhat_linux | — | Upgrade libwinprUpgrade libwinpr-debuginfoUpgrade freerdp-debugsourceUpgrade freerdp-libsUpgrade freerdp-libs-debuginfoUpgrade freerdpUpgrade freerdp-debuginfoUpgrade freerdp-develNo solution existsUpgrade libwinpr-devel | May 15, 2023 | Oct 12, 2022 |
| Rocky_linux | — | Upgrade freerdp-develUpgrade libwinprUpgrade freerdp-libsUpgrade freerdpUpgrade libwinpr-devel | Jun 29, 2026 | Jun 25, 2026 |
| Suse | — | Upgrade uwac0-0-develUpgrade freerdp-waylandUpgrade freerdp-proxyUpgrade freerdp-develUpgrade freerdp-serverUpgrade libuwac0-0Upgrade freerdpUpgrade winpr2-develUpgrade libwinpr2Upgrade libfreerdp2 | Nov 16, 2022 | Oct 12, 2022 |
| Ubuntu | — | Upgrade libfreerdp-client2-2Upgrade libfreerdp-server2-2 | Nov 23, 2022 | Oct 12, 2022 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub