FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicalization and base path check for `drive` channel. A malicious server can trick a FreeRDP based client to read files outside the shared directory. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/drive`, `/drives` or `+home-drive` redirection switch.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freerdp-develUpgrade freerdp-libsUpgrade libwinprUpgrade freerdpUpgrade libwinpr-devel | May 15, 2023 | Nov 16, 2022 |
| Alpine Linux | — | Upgrade freerdpUpgrade freerdp2 | Aug 22, 2024 | Nov 16, 2022 |
| Amazon Linux Ami 2 | — | Upgrade freerdp-debuginfoUpgrade libwinprUpgrade libwinpr-develUpgrade freerdpUpgrade freerdp-develUpgrade freerdp-libs | Feb 7, 2023 | Nov 16, 2022 |
| Centos_linux | — | Upgrade libwinpr-debuginfoUpgrade freerdp-debugsourceUpgrade freerdp-debuginfoUpgrade freerdpUpgrade freerdp-libsUpgrade libwinprUpgrade freerdp-libs-debuginfoUpgrade libwinpr-devel | May 15, 2023 | Nov 16, 2022 |
| Debian | — | Upgrade freerdp2 | Nov 20, 2023 | Nov 16, 2022 |
| Freebsd | — | Upgrade freerdp | Dec 25, 2022 | Dec 24, 2022 |
| Gentoo Linux | — | Upgrade net-misc/freerdp. | Jan 15, 2024 | Nov 16, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libwinprUpgrade freerdp-libsUpgrade freerdp | Feb 9, 2023 | Nov 16, 2022 |
| Oracle_linux | — | Upgrade freerdp-libsUpgrade freerdp-develUpgrade libwinprUpgrade libwinpr-develUpgrade freerdp | May 18, 2023 | Nov 16, 2022 |
| Redhat_linux | — | Upgrade freerdp-libs-debuginfoUpgrade freerdp-debuginfoUpgrade freerdp-libsUpgrade freerdpNo solution existsUpgrade freerdp-debugsourceUpgrade freerdp-develUpgrade libwinpr-develUpgrade libwinprUpgrade libwinpr-debuginfo | May 15, 2023 | Nov 16, 2022 |
| Rocky_linux | — | Upgrade freerdp-develUpgrade freerdp-libsUpgrade freerdpUpgrade libwinpr-develUpgrade libwinpr | Jun 29, 2026 | Jun 25, 2026 |
| Suse | — | Upgrade libfreerdp2Upgrade libuwac0-0Upgrade freerdpUpgrade uwac0-0-develUpgrade freerdp-serverUpgrade freerdp-proxyUpgrade freerdp-develUpgrade winpr2-develUpgrade freerdp-waylandUpgrade libwinpr2 | Feb 16, 2023 | Nov 16, 2022 |
| Ubuntu | — | Upgrade libfreerdp-client2-2Upgrade libfreerdp-server2-2 | Nov 23, 2022 | Nov 16, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub