FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, use `/gfx` or `/rfx` modes (on by default, require server side support).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade freerdp-debuginfoUpgrade libwinpr-develUpgrade freerdp-develUpgrade libwinprUpgrade freerdpUpgrade freerdp-libs | May 16, 2024 | Apr 22, 2024 |
| Debian | — | Upgrade freerdp2 | Feb 17, 2025 | Apr 22, 2024 |
| Redhat_linux | — | No solution existsUpgrade freerdp-debuginfoUpgrade libwinpr-debuginfoUpgrade freerdp-libs-debuginfoUpgrade freerdp-develUpgrade freerdp-libsUpgrade freerdp-debugsourceUpgrade libwinprUpgrade freerdpUpgrade libwinpr-devel | Nov 13, 2024 | Apr 22, 2024 |
| Rocky_linux | — | Upgrade freerdp-libsUpgrade freerdp-develUpgrade libwinpr-debuginfoUpgrade libwinprUpgrade freerdp-libs-debuginfoUpgrade freerdp-debugsourceUpgrade freerdpUpgrade freerdp-debuginfoUpgrade libwinpr-devel | Mar 18, 2025 | Apr 22, 2024 |
| Suse | — | Upgrade libfreerdp2Upgrade freerdp-proxyUpgrade libwinpr2Upgrade uwac0-0-develUpgrade freerdp-sdlUpgrade librdtk0-0Upgrade freerdp-develUpgrade freerdpUpgrade freerdp-proxy-pluginsUpgrade libfreerdp3-3Upgrade freerdp-waylandUpgrade winpr-develUpgrade winpr2-develUpgrade libwinpr3-3Upgrade freerdp-serverUpgrade libfreerdp-server-proxy3-3Upgrade libuwac0-0 | May 13, 2024 | Apr 22, 2024 |
| Ubuntu | — | Upgrade libfreerdp2-2t64 (Ubuntu Pro)Upgrade libfreerdp-server2-2t64 (Ubuntu Pro)Upgrade libfreerdp2-2Upgrade libfreerdp-client2-2t64 (Ubuntu Pro) | Apr 25, 2024 | Apr 22, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub