The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in `drive` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the drive redirection channel - command line options `/drive`, `+drives` or `+home-drive`.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libwinpr-develUpgrade freerdpUpgrade freerdp-develUpgrade freerdp-libsUpgrade libwinpr | May 15, 2023 | Nov 16, 2022 |
| Alpine Linux | — | Upgrade freerdpUpgrade freerdp2 | Aug 22, 2024 | Nov 16, 2022 |
| Amazon Linux Ami 2 | — | Upgrade libwinpr-develUpgrade freerdpUpgrade libwinprUpgrade freerdp-libsUpgrade freerdp-develUpgrade freerdp-debuginfo | Feb 7, 2023 | Nov 16, 2022 |
| Centos_linux | — | Upgrade freerdp-libsUpgrade freerdp-libs-debuginfoUpgrade freerdp-debugsourceUpgrade libwinprUpgrade freerdp-debuginfoUpgrade freerdpUpgrade libwinpr-debuginfoUpgrade libwinpr-devel | May 15, 2023 | Nov 16, 2022 |
| Debian | — | Upgrade freerdp2 | Nov 20, 2023 | Nov 16, 2022 |
| Freebsd | — | Upgrade freerdp | Dec 25, 2022 | Dec 24, 2022 |
| Gentoo Linux | — | Upgrade net-misc/freerdp. | Jan 15, 2024 | Nov 16, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freerdpUpgrade libwinprUpgrade freerdp-libs | Feb 9, 2023 | Nov 16, 2022 |
| Oracle_linux | — | Upgrade libwinpr-develUpgrade freerdpUpgrade libwinprUpgrade freerdp-libsUpgrade freerdp-devel | May 18, 2023 | Nov 16, 2022 |
| Redhat_linux | — | Upgrade freerdpUpgrade freerdp-libsNo solution existsUpgrade freerdp-develUpgrade freerdp-debuginfoUpgrade freerdp-libs-debuginfoUpgrade freerdp-debugsourceUpgrade libwinpr-develUpgrade libwinprUpgrade libwinpr-debuginfo | May 15, 2023 | Nov 16, 2022 |
| Rocky_linux | — | Upgrade freerdp-develUpgrade libwinprUpgrade freerdp-libsUpgrade libwinpr-develUpgrade freerdp | Jun 29, 2026 | Jun 25, 2026 |
| Suse | — | Upgrade libfreerdp2Upgrade libuwac0-0Upgrade libwinpr2Upgrade freerdp-serverUpgrade winpr2-develUpgrade freerdp-proxyUpgrade freerdp-develUpgrade uwac0-0-develUpgrade freerdpUpgrade freerdp-wayland | Feb 16, 2023 | Nov 16, 2022 |
| Ubuntu | — | Upgrade libfreerdp2-2 (Ubuntu Pro)Upgrade libfreerdp2-2 | Nov 30, 2023 | Nov 16, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub