FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using `/parallel` command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please upgrade to 2.8.1 where this issue is patched. If unable to upgrade, do not use parallel port redirection (`/parallel` command line switch) as a workaround.
CVSS Details
- CVSS 3.1 Base Score: 3.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libwinpr-develUpgrade freerdpUpgrade freerdp-libsUpgrade libwinprUpgrade freerdp-devel | May 15, 2023 | Oct 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade libwinpr-develUpgrade libwinprUpgrade freerdpUpgrade freerdp-libsUpgrade freerdp-debuginfoUpgrade freerdp-devel | Feb 7, 2023 | Oct 12, 2022 |
| Centos_linux | — | Upgrade freerdp-debugsourceUpgrade freerdpUpgrade freerdp-debuginfoUpgrade libwinpr-develUpgrade freerdp-libsUpgrade freerdp-libs-debuginfoUpgrade libwinprUpgrade libwinpr-debuginfo | May 15, 2023 | Oct 12, 2022 |
| Debian | — | Upgrade freerdp2 | Nov 20, 2023 | Oct 12, 2022 |
| Freebsd | — | Upgrade freerdp | Feb 25, 2023 | Feb 24, 2023 |
| Gentoo Linux | — | Upgrade net-misc/freerdp. | Oct 31, 2022 | Oct 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freerdp-libsUpgrade freerdpUpgrade libwinpr | Feb 9, 2023 | Oct 12, 2022 |
| Oracle_linux | — | Upgrade libwinpr-develUpgrade freerdp-develUpgrade libwinprUpgrade freerdp-libsUpgrade freerdp | May 18, 2023 | Oct 13, 2022 |
| Redhat_linux | — | Upgrade freerdp-develUpgrade freerdpUpgrade libwinprUpgrade freerdp-libs-debuginfoNo solution existsUpgrade libwinpr-develUpgrade freerdp-libsUpgrade freerdp-debugsourceUpgrade libwinpr-debuginfoUpgrade freerdp-debuginfo | May 15, 2023 | Oct 12, 2022 |
| Rocky_linux | — | Upgrade freerdp-libsUpgrade libwinprUpgrade freerdp-develUpgrade freerdpUpgrade libwinpr-devel | Jun 29, 2026 | Jun 25, 2026 |
| Suse | — | Upgrade freerdpUpgrade winpr2-develUpgrade libuwac0-0Upgrade freerdp-proxyUpgrade freerdp-waylandUpgrade libfreerdp2Upgrade uwac0-0-develUpgrade libwinpr2Upgrade freerdp-serverUpgrade freerdp-devel | Nov 16, 2022 | Oct 12, 2022 |
| Ubuntu | — | Upgrade libfreerdp-server2-2Upgrade libfreerdp-client2-2 | Nov 23, 2022 | Oct 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub