FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients and servers that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. No known workarounds are available.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-freerdpamazon-linux-ami-2-upgrade-freerdp-debuginfoamazon-linux-ami-2-upgrade-freerdp-develamazon-linux-ami-2-upgrade-freerdp-libsamazon-linux-ami-2-upgrade-libwinpramazon-linux-ami-2-upgrade-libwinpr-devel | May 16, 2024 | Apr 22, 2024 | |
| Debian | debian-upgrade-freerdp2 | Feb 17, 2025 | Apr 22, 2024 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-freerdphuawei-euleros-2_0_sp8-upgrade-freerdp-libshuawei-euleros-2_0_sp8-upgrade-libwinpr | Jan 21, 2025 | Apr 22, 2024 | |
| Redhat_linux | redhat-upgrade-freerdpredhat-upgrade-freerdp-debuginforedhat-upgrade-freerdp-debugsourceredhat-upgrade-freerdp-develredhat-upgrade-freerdp-libsredhat-upgrade-freerdp-libs-debuginforedhat-upgrade-libwinprredhat-upgrade-libwinpr-debuginforedhat-upgrade-libwinpr-devel | Nov 13, 2024 | Apr 22, 2024 | |
| Rocky_linux | rocky-upgrade-freerdprocky-upgrade-freerdp-debuginforocky-upgrade-freerdp-debugsourcerocky-upgrade-freerdp-develrocky-upgrade-freerdp-libsrocky-upgrade-freerdp-libs-debuginforocky-upgrade-libwinprrocky-upgrade-libwinpr-debuginforocky-upgrade-libwinpr-devel | Mar 18, 2025 | Apr 22, 2024 | |
| Suse | — | suse-upgrade-freerdpsuse-upgrade-freerdp-develsuse-upgrade-freerdp-proxysuse-upgrade-freerdp-proxy-pluginssuse-upgrade-freerdp-sdlsuse-upgrade-freerdp-serversuse-upgrade-freerdp-waylandsuse-upgrade-libfreerdp-server-proxy3-3suse-upgrade-libfreerdp2suse-upgrade-libfreerdp3-3suse-upgrade-librdtk0-0suse-upgrade-libuwac0-0suse-upgrade-libwinpr2suse-upgrade-libwinpr3-3suse-upgrade-uwac0-0-develsuse-upgrade-winpr-develsuse-upgrade-winpr2-devel | May 13, 2024 | Apr 22, 2024 |
| Ubuntu | ubuntu-pro-upgrade-libfreerdp-client2-2t64ubuntu-pro-upgrade-libfreerdp-server2-2t64ubuntu-pro-upgrade-libfreerdp2-2t64ubuntu-upgrade-libfreerdp2-2 | Apr 25, 2024 | Apr 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub