FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using `/parallel` command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please upgrade to 2.8.1 where this issue is patched. If unable to upgrade, do not use parallel port redirection (`/parallel` command line switch) as a workaround.
CVSS Details
- CVSS 3.1 Base Score: 3.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freerdpUpgrade libwinpr-develUpgrade libwinprUpgrade freerdp-develUpgrade freerdp-libs | May 15, 2023 | Oct 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade freerdp-libsUpgrade freerdp-debuginfoUpgrade freerdp-develUpgrade libwinpr-develUpgrade freerdpUpgrade libwinpr | Feb 7, 2023 | Oct 12, 2022 |
| Centos_linux | — | Upgrade libwinprUpgrade freerdp-libsUpgrade freerdp-libs-debuginfoUpgrade libwinpr-debuginfoUpgrade libwinpr-develUpgrade freerdp-debugsourceUpgrade freerdpUpgrade freerdp-debuginfo | May 15, 2023 | Oct 12, 2022 |
| Debian | — | Upgrade freerdp2 | Nov 20, 2023 | Oct 12, 2022 |
| Freebsd | — | Upgrade freerdp | Feb 25, 2023 | Feb 24, 2023 |
| Gentoo Linux | — | Upgrade net-misc/freerdp. | Oct 31, 2022 | Oct 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freerdpUpgrade libwinprUpgrade freerdp-libs | Feb 9, 2023 | Oct 12, 2022 |
| Oracle_linux | — | Upgrade freerdpUpgrade freerdp-libsUpgrade freerdp-develUpgrade libwinprUpgrade libwinpr-devel | May 18, 2023 | Oct 13, 2022 |
| Redhat_linux | — | Upgrade freerdpUpgrade freerdp-develUpgrade libwinprUpgrade libwinpr-debuginfoUpgrade freerdp-debuginfoUpgrade freerdp-debugsourceUpgrade libwinpr-develNo solution existsUpgrade freerdp-libsUpgrade freerdp-libs-debuginfo | May 15, 2023 | Oct 12, 2022 |
| Rocky_linux | — | Upgrade libwinprUpgrade freerdp-libsUpgrade freerdp-develUpgrade libwinpr-develUpgrade freerdp | Jun 29, 2026 | Jun 25, 2026 |
| Suse | — | Upgrade freerdp-proxyUpgrade freerdp-waylandUpgrade libuwac0-0Upgrade winpr2-develUpgrade libfreerdp2Upgrade freerdpUpgrade uwac0-0-develUpgrade freerdp-serverUpgrade libwinpr2Upgrade freerdp-devel | Nov 16, 2022 | Oct 12, 2022 |
| Ubuntu | — | Upgrade libfreerdp-server2-2Upgrade libfreerdp-client2-2 | Nov 23, 2022 | Oct 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub