FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gateway connections (`/gt:rpc`) fail to validate input data. A malicious gateway might allow client memory to be written out of bounds. This issue has been resolved in version 2.4.1. If you are unable to update then use `/gt:http` rather than /gt:rdp connections if possible or use a direct connection without a gateway.
CVSS Details
- CVSS 3.1 Base Score: 5.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freerdp-libsUpgrade freerdp-develUpgrade libwinprUpgrade freerdpUpgrade libwinpr-devel | May 4, 2022 | Oct 21, 2021 |
| Alpine Linux | — | Upgrade freerdpUpgrade freerdp2 | Aug 22, 2024 | Oct 21, 2021 |
| Amazon Linux Ami 2 | — | Upgrade freerdp-debuginfoUpgrade freerdp-libsUpgrade freerdp-develUpgrade libwinprUpgrade libwinpr-develUpgrade freerdp | Jul 4, 2022 | Oct 21, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 21, 2021 |
| Centos_linux | — | Upgrade freerdp-libsUpgrade libwinprUpgrade freerdpUpgrade freerdp-libs-debuginfoUpgrade libwinpr-debuginfoUpgrade freerdp-develUpgrade freerdp-debugsourceUpgrade freerdp-debuginfoUpgrade libwinpr-devel | Nov 12, 2021 | Nov 11, 2021 |
| Debian | — | Upgrade freerdp2 | Jul 30, 2024 | Oct 21, 2021 |
| Gentoo Linux | — | Upgrade net-misc/freerdp. | Oct 31, 2022 | Oct 21, 2021 |
| Oracle_linux | — | Upgrade freerdp-develUpgrade libwinpr-develUpgrade freerdpUpgrade libwinprUpgrade freerdp-libs | Nov 12, 2021 | Oct 21, 2021 |
| Redhat_linux | — | Upgrade freerdpUpgrade freerdp-libs-debuginfoUpgrade freerdp-debugsourceUpgrade libwinpr-develUpgrade freerdp-libsUpgrade libwinpr-debuginfoUpgrade libwinprUpgrade freerdp-debuginfoUpgrade freerdp-devel | Nov 12, 2021 | Nov 11, 2021 |
| Rocky_linux | — | Upgrade libwinprUpgrade freerdp-libsUpgrade libwinpr-debuginfoUpgrade freerdp-libs-debuginfoUpgrade freerdp-develUpgrade freerdpUpgrade freerdp-debuginfoUpgrade freerdp-debugsourceUpgrade libwinpr-devel | May 5, 2022 | Oct 21, 2021 |
| Suse | — | Upgrade freerdpUpgrade freerdp-proxyUpgrade libfreerdp2Upgrade libuwac0-0Upgrade freerdp-waylandUpgrade uwac0-0-develUpgrade winpr2-develUpgrade libwinpr2Upgrade freerdp-develUpgrade freerdp-server | Oct 26, 2022 | Oct 21, 2021 |
| Ubuntu | — | Upgrade libfreerdp-client2-2 | Nov 24, 2021 | Oct 21, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub