FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the `/video` command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations are not affected. This issue has been patched in version 2.8.1. If you cannot upgrade do not use the `/video` switch.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freerdp-develUpgrade freerdpUpgrade freerdp-libsUpgrade libwinpr-develUpgrade libwinpr | May 15, 2023 | Oct 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade freerdp-develUpgrade freerdp-libsUpgrade freerdp-debuginfoUpgrade freerdpUpgrade libwinpr-develUpgrade libwinpr | Feb 7, 2023 | Oct 12, 2022 |
| Centos_linux | — | Upgrade libwinpr-debuginfoUpgrade libwinprUpgrade freerdp-libs-debuginfoUpgrade freerdp-libsUpgrade freerdpUpgrade libwinpr-develUpgrade freerdp-debuginfoUpgrade freerdp-debugsource | May 15, 2023 | Oct 12, 2022 |
| Debian | — | Upgrade freerdp2 | Nov 20, 2023 | Oct 12, 2022 |
| Freebsd | — | Upgrade freerdp | Feb 25, 2023 | Feb 24, 2023 |
| Gentoo Linux | — | Upgrade net-misc/freerdp. | Oct 31, 2022 | Oct 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freerdp-libsUpgrade libwinprUpgrade freerdp | Feb 9, 2023 | Oct 12, 2022 |
| Oracle_linux | — | Upgrade freerdp-develUpgrade freerdpUpgrade libwinpr-develUpgrade freerdp-libsUpgrade libwinpr | May 18, 2023 | Oct 13, 2022 |
| Redhat_linux | — | Upgrade freerdp-debuginfoUpgrade freerdp-debugsourceUpgrade freerdp-develNo solution existsUpgrade freerdp-libsUpgrade libwinpr-develUpgrade freerdp-libs-debuginfoUpgrade freerdpUpgrade libwinpr-debuginfoUpgrade libwinpr | May 15, 2023 | Oct 12, 2022 |
| Rocky_linux | — | Upgrade libwinprUpgrade freerdp-develUpgrade freerdp-libsUpgrade libwinpr-develUpgrade freerdp | Jun 29, 2026 | Jun 25, 2026 |
| Suse | — | Upgrade libuwac0-0Upgrade libfreerdp2Upgrade winpr2-develUpgrade freerdpUpgrade libwinpr2Upgrade freerdp-serverUpgrade freerdp-proxyUpgrade freerdp-waylandUpgrade uwac0-0-develUpgrade freerdp-devel | Nov 16, 2022 | Oct 12, 2022 |
| Ubuntu | — | Upgrade libfreerdp-server2-2Upgrade libfreerdp-client2-2 | Nov 23, 2022 | Oct 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub