CVE-2022-39283

FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the `/video` command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations are not affected. This issue has been patched in version 2.8.1. If you cannot upgrade do not use the `/video` switch.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.9 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 57%
Affected Products (NVD)
VendorProductVersion
freerdpfreerdp
𝑥
< 2.8.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
freerdp2
bookworm
2.10.0+dfsg1-1
fixed
bullseye
no-dsa
sid
2.11.7+dfsg1-4
fixed
trixie
2.11.7+dfsg1-4
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
freerdp
bionic
needs-triage
focal
dne
jammy
dne
trusty
ignored
xenial
needs-triage
freerdp2
bionic
Fixed 2.2.0+dfsg1-0ubuntu0.18.04.4
released
focal
Fixed 2.2.0+dfsg1-0ubuntu0.20.04.4
released
jammy
Fixed 2.6.1+dfsg1-3ubuntu2.3
released
kinetic
Fixed 2.8.1+dfsg1-0ubuntu1
released
lunar
Fixed 2.8.1+dfsg1-0ubuntu1
released
mantic
Fixed 2.8.1+dfsg1-0ubuntu1
released
noble
Fixed 2.8.1+dfsg1-0ubuntu1
released
trusty
ignored
xenial
ignored
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
freerdp
suse enterprise desktop 15 SP3
2.1.2-150200.15.21.1
fixed
suse enterprise desktop 15 SP4
2.4.0-150400.3.9.1
fixed
suse enterprise desktop 15 SP5
2.4.0-150400.3.9.1
fixed
suse enterprise sap 15 SP3
2.1.2-150200.15.21.1
fixed
suse enterprise sap 15 SP4
2.4.0-150400.3.9.1
fixed
suse enterprise sap 15 SP5
2.4.0-150400.3.9.1
fixed
suse enterprise server 15 SP3
2.1.2-150200.15.21.1
fixed
suse enterprise server 15 SP4
2.4.0-150400.3.9.1
fixed
suse enterprise server 15 SP5
2.4.0-150400.3.9.1
fixed
suse enterprise workstation 15 SP3
2.1.2-150200.15.21.1
fixed
suse enterprise workstation 15 SP4
2.4.0-150400.3.9.1
fixed
suse enterprise workstation 15 SP5
2.4.0-150400.3.9.1
fixed
freerdp-devel
suse enterprise desktop 15 SP3
2.1.2-150200.15.21.1
fixed
suse enterprise desktop 15 SP4
2.4.0-150400.3.9.1
fixed
suse enterprise desktop 15 SP5
2.4.0-150400.3.9.1
fixed
suse enterprise sap 15 SP3
2.1.2-150200.15.21.1
fixed
suse enterprise sap 15 SP4
2.4.0-150400.3.9.1
fixed
suse enterprise sap 15 SP5
2.4.0-150400.3.9.1
fixed
suse enterprise server 15 SP3
2.1.2-150200.15.21.1
fixed
suse enterprise server 15 SP4
2.4.0-150400.3.9.1
fixed
suse enterprise server 15 SP5
2.4.0-150400.3.9.1
fixed
suse enterprise workstation 15 SP3
2.1.2-150200.15.21.1
fixed
suse enterprise workstation 15 SP4
2.4.0-150400.3.9.1
fixed
suse enterprise workstation 15 SP5
2.4.0-150400.3.9.1
fixed
freerdp-proxy
suse enterprise desktop 15 SP3
2.1.2-150200.15.21.1
fixed
suse enterprise desktop 15 SP4
2.4.0-150400.3.9.1
fixed
suse enterprise desktop 15 SP5
2.4.0-150400.3.9.1
fixed
suse enterprise sap 15 SP3
2.1.2-150200.15.21.1
fixed
suse enterprise sap 15 SP4
2.4.0-150400.3.9.1
fixed
suse enterprise sap 15 SP5
2.4.0-150400.3.9.1
fixed
suse enterprise server 15 SP3
2.1.2-150200.15.21.1
fixed
suse enterprise server 15 SP4
2.4.0-150400.3.9.1
fixed
suse enterprise server 15 SP5
2.4.0-150400.3.9.1
fixed
suse enterprise workstation 15 SP3
2.1.2-150200.15.21.1
fixed
suse enterprise workstation 15 SP4
2.4.0-150400.3.9.1
fixed
suse enterprise workstation 15 SP5
2.4.0-150400.3.9.1
fixed
libfreerdp2
suse enterprise desktop 15 SP3
2.1.2-150200.15.21.1
fixed
suse enterprise desktop 15 SP4
2.4.0-150400.3.9.1
fixed
suse enterprise desktop 15 SP5
2.4.0-150400.3.9.1
fixed
suse enterprise sap 15 SP3
2.1.2-150200.15.21.1
fixed
suse enterprise sap 15 SP4
2.4.0-150400.3.9.1
fixed
suse enterprise sap 15 SP5
2.4.0-150400.3.9.1
fixed
suse enterprise server 15 SP3
2.1.2-150200.15.21.1
fixed
suse enterprise server 15 SP4
2.4.0-150400.3.9.1
fixed
suse enterprise server 15 SP5
2.4.0-150400.3.9.1
fixed
suse enterprise workstation 15 SP3
2.1.2-150200.15.21.1
fixed
suse enterprise workstation 15 SP4
2.4.0-150400.3.9.1
fixed
suse enterprise workstation 15 SP5
2.4.0-150400.3.9.1
fixed
libwinpr2
suse enterprise desktop 15 SP3
2.1.2-150200.15.21.1
fixed
suse enterprise desktop 15 SP4
2.4.0-150400.3.9.1
fixed
suse enterprise desktop 15 SP5
2.4.0-150400.3.9.1
fixed
suse enterprise sap 15 SP3
2.1.2-150200.15.21.1
fixed
suse enterprise sap 15 SP4
2.4.0-150400.3.9.1
fixed
suse enterprise sap 15 SP5
2.4.0-150400.3.9.1
fixed
suse enterprise server 15 SP3
2.1.2-150200.15.21.1
fixed
suse enterprise server 15 SP4
2.4.0-150400.3.9.1
fixed
suse enterprise server 15 SP5
2.4.0-150400.3.9.1
fixed
suse enterprise workstation 15 SP3
2.1.2-150200.15.21.1
fixed
suse enterprise workstation 15 SP4
2.4.0-150400.3.9.1
fixed
suse enterprise workstation 15 SP5
2.4.0-150400.3.9.1
fixed
winpr2-devel
suse enterprise desktop 15 SP3
2.1.2-150200.15.21.1
fixed
suse enterprise desktop 15 SP4
2.4.0-150400.3.9.1
fixed
suse enterprise desktop 15 SP5
2.4.0-150400.3.9.1
fixed
suse enterprise sap 15 SP3
2.1.2-150200.15.21.1
fixed
suse enterprise sap 15 SP4
2.4.0-150400.3.9.1
fixed
suse enterprise sap 15 SP5
2.4.0-150400.3.9.1
fixed
suse enterprise server 15 SP3
2.1.2-150200.15.21.1
fixed
suse enterprise server 15 SP4
2.4.0-150400.3.9.1
fixed
suse enterprise server 15 SP5
2.4.0-150400.3.9.1
fixed
suse enterprise workstation 15 SP3
2.1.2-150200.15.21.1
fixed
suse enterprise workstation 15 SP4
2.4.0-150400.3.9.1
fixed
suse enterprise workstation 15 SP5
2.4.0-150400.3.9.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
freerdp
RHEL 8
2:2.2.0-10.el8
fixed
RHEL 9
2:2.4.1-5.el9
fixed
freerdp-devel
RHEL 8
2:2.2.0-10.el8
fixed
RHEL 9
2:2.4.1-5.el9
fixed
freerdp-libs
RHEL 8
2:2.2.0-10.el8
fixed
RHEL 9
2:2.4.1-5.el9
fixed
libwinpr
RHEL 8
2:2.2.0-10.el8
fixed
RHEL 9
2:2.4.1-5.el9
fixed
libwinpr-devel
RHEL 8
2:2.2.0-10.el8
fixed
RHEL 9
2:2.4.1-5.el9
fixed
Common Weakness Enumeration
References
https://github.com/FreeRDP/FreeRDP/releases/tag/2.8.1
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6cf9-3328-qrvh
https://lists.debian.org/debian-lts-announce/2023/11/msg00010.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HEWWYMGWIMD4RDCOGHWMZXUMBGZHC5NW/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RLZCF7YHNC5BECDPEJNAZUYGNNM7NFME/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UDOTAOJBCZKREZJPT6VZ25GESI5T6RBG/
https://security.gentoo.org/glsa/202210-24
https://github.com/FreeRDP/FreeRDP/releases/tag/2.8.1
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6cf9-3328-qrvh
https://lists.debian.org/debian-lts-announce/2023/11/msg00010.html
https://lists.debian.org/debian-lts-announce/2025/02/msg00016.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HEWWYMGWIMD4RDCOGHWMZXUMBGZHC5NW/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RLZCF7YHNC5BECDPEJNAZUYGNNM7NFME/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UDOTAOJBCZKREZJPT6VZ25GESI5T6RBG/
https://security.gentoo.org/glsa/202210-24