The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition on too narrow types leads to allocation of a buffer too small holding the data written. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/usb` redirection switch.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libwinpr-develUpgrade freerdp-libsUpgrade freerdpUpgrade libwinprUpgrade freerdp-devel | May 15, 2023 | Nov 16, 2022 |
| Alpine Linux | — | Upgrade freerdp2Upgrade freerdp | Aug 22, 2024 | Nov 16, 2022 |
| Amazon Linux Ami 2 | — | Upgrade freerdp-debuginfoUpgrade libwinprUpgrade freerdpUpgrade libwinpr-develUpgrade freerdp-develUpgrade freerdp-libs | Feb 7, 2023 | Nov 16, 2022 |
| Centos_linux | — | Upgrade freerdp-debuginfoUpgrade freerdp-debugsourceUpgrade freerdp-libs-debuginfoUpgrade libwinpr-develUpgrade freerdpUpgrade libwinpr-debuginfoUpgrade libwinprUpgrade freerdp-libs | May 15, 2023 | Nov 16, 2022 |
| Debian | — | Upgrade freerdp2 | Jul 30, 2024 | Nov 16, 2022 |
| Freebsd | — | Upgrade freerdp | Dec 25, 2022 | Dec 24, 2022 |
| Gentoo Linux | — | Upgrade net-misc/freerdp. | Jan 15, 2024 | Nov 16, 2022 |
| Oracle_linux | — | Upgrade freerdpUpgrade libwinprUpgrade libwinpr-develUpgrade freerdp-develUpgrade freerdp-libs | May 18, 2023 | Nov 16, 2022 |
| Redhat_linux | — | Upgrade libwinpr-develUpgrade freerdp-debugsourceUpgrade freerdpUpgrade freerdp-develUpgrade freerdp-libs-debuginfoUpgrade freerdp-libsUpgrade libwinpr-debuginfoUpgrade libwinprUpgrade freerdp-debuginfoNo solution exists | May 15, 2023 | Nov 16, 2022 |
| Rocky_linux | — | Upgrade freerdp-develUpgrade libwinpr-develUpgrade freerdp-libsUpgrade freerdpUpgrade libwinpr | Jun 29, 2026 | Jun 25, 2026 |
| Suse | — | Upgrade libfreerdp2Upgrade freerdp-develUpgrade freerdp-proxyUpgrade freerdp-waylandUpgrade uwac0-0-develUpgrade freerdp-serverUpgrade libuwac0-0Upgrade freerdpUpgrade libwinpr2Upgrade winpr2-devel | Feb 16, 2023 | Nov 16, 2022 |
| Ubuntu | — | Upgrade libfreerdp-client2-2Upgrade libfreerdp-server2-2 | Nov 23, 2022 | Nov 16, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub