FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the `/video` command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations are not affected. This issue has been patched in version 2.8.1. If you cannot upgrade do not use the `/video` switch.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freerdp-libsUpgrade libwinpr-develUpgrade libwinprUpgrade freerdp-develUpgrade freerdp | May 15, 2023 | Oct 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade freerdp-develUpgrade freerdp-libsUpgrade freerdp-debuginfoUpgrade freerdpUpgrade libwinpr-develUpgrade libwinpr | Feb 7, 2023 | Oct 12, 2022 |
| Centos_linux | — | Upgrade freerdp-debuginfoUpgrade libwinpr-develUpgrade freerdp-libsUpgrade freerdpUpgrade freerdp-libs-debuginfoUpgrade freerdp-debugsourceUpgrade libwinprUpgrade libwinpr-debuginfo | May 15, 2023 | Oct 12, 2022 |
| Debian | — | Upgrade freerdp2 | Nov 20, 2023 | Oct 12, 2022 |
| Freebsd | — | Upgrade freerdp | Feb 25, 2023 | Feb 24, 2023 |
| Gentoo Linux | — | Upgrade net-misc/freerdp. | Oct 31, 2022 | Oct 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freerdp-libsUpgrade libwinprUpgrade freerdp | Feb 9, 2023 | Oct 12, 2022 |
| Oracle_linux | — | Upgrade libwinprUpgrade freerdp-libsUpgrade freerdpUpgrade libwinpr-develUpgrade freerdp-devel | May 18, 2023 | Oct 13, 2022 |
| Redhat_linux | — | Upgrade libwinprUpgrade libwinpr-debuginfoNo solution existsUpgrade freerdpUpgrade freerdp-develUpgrade freerdp-debugsourceUpgrade freerdp-libs-debuginfoUpgrade freerdp-debuginfoUpgrade freerdp-libsUpgrade libwinpr-devel | May 15, 2023 | Oct 12, 2022 |
| Rocky_linux | — | Upgrade libwinpr-develUpgrade freerdpUpgrade freerdp-libsUpgrade libwinprUpgrade freerdp-devel | Jun 29, 2026 | Jun 25, 2026 |
| Suse | — | Upgrade winpr2-develUpgrade libfreerdp2Upgrade freerdpUpgrade libuwac0-0Upgrade libwinpr2Upgrade freerdp-waylandUpgrade freerdp-serverUpgrade uwac0-0-develUpgrade freerdp-proxyUpgrade freerdp-devel | Nov 16, 2022 | Oct 12, 2022 |
| Ubuntu | — | Upgrade libfreerdp-client2-2Upgrade libfreerdp-server2-2 | Nov 23, 2022 | Oct 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub