FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input validation in `urbdrc` channel. A malicious server can trick a FreeRDP based client to crash with division by zero. This issue has been addressed in version 2.9.0. All users are advised to upgrade. Users unable to upgrade should not use the `/usb` redirection switch.
CVSS Details
- CVSS 3.1 Base Score: 4.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freerdp-develUpgrade libwinpr-develUpgrade freerdp-libsUpgrade libwinprUpgrade freerdp | May 15, 2023 | Nov 16, 2022 |
| Alpine Linux | — | Upgrade freerdpUpgrade freerdp2 | Aug 22, 2024 | Nov 16, 2022 |
| Amazon Linux Ami 2 | — | Upgrade freerdp-develUpgrade freerdp-libsUpgrade libwinprUpgrade freerdp-debuginfoUpgrade freerdpUpgrade libwinpr-devel | Feb 7, 2023 | Nov 16, 2022 |
| Centos_linux | — | Upgrade libwinpr-debuginfoUpgrade libwinprUpgrade freerdp-libs-debuginfoUpgrade freerdp-libsUpgrade freerdpUpgrade freerdp-debuginfoUpgrade libwinpr-develUpgrade freerdp-debugsource | May 15, 2023 | Nov 16, 2022 |
| Debian | — | Upgrade freerdp2 | Nov 20, 2023 | Nov 16, 2022 |
| Freebsd | — | Upgrade freerdp | Dec 25, 2022 | Dec 24, 2022 |
| Gentoo Linux | — | Upgrade net-misc/freerdp. | Jan 15, 2024 | Nov 16, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freerdp-libsUpgrade libwinprUpgrade freerdp | Feb 9, 2023 | Nov 16, 2022 |
| Oracle_linux | — | Upgrade libwinpr-develUpgrade freerdpUpgrade freerdp-develUpgrade libwinprUpgrade freerdp-libs | May 18, 2023 | Nov 16, 2022 |
| Redhat_linux | — | Upgrade freerdp-develUpgrade freerdp-libs-debuginfoUpgrade freerdp-libsUpgrade libwinprUpgrade libwinpr-debuginfoNo solution existsUpgrade libwinpr-develUpgrade freerdp-debuginfoUpgrade freerdpUpgrade freerdp-debugsource | May 15, 2023 | Nov 16, 2022 |
| Rocky_linux | — | Upgrade freerdp-libsUpgrade libwinprUpgrade freerdpUpgrade freerdp-develUpgrade libwinpr-devel | Jun 29, 2026 | Jun 25, 2026 |
| Suse | — | Upgrade uwac0-0-develUpgrade libfreerdp2Upgrade freerdp-serverUpgrade freerdp-proxyUpgrade libwinpr2Upgrade freerdp-waylandUpgrade libuwac0-0Upgrade winpr2-develUpgrade freerdpUpgrade freerdp-devel | Nov 28, 2022 | Nov 16, 2022 |
| Ubuntu | — | Upgrade libfreerdp-server2-2Upgrade libfreerdp-client2-2 | Nov 23, 2022 | Nov 16, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub