CVE-2022-39316

FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGFX decoder component of FreeRDP. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it likely resulting in a crash. This issue has been addressed in the 2.9.0 release. Users are advised to upgrade.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.8 MEDIUM
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 49%
Affected Products (NVD)
VendorProductVersion
freerdpfreerdp
𝑥
< 2.9.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
freerdp2
bookworm
2.10.0+dfsg1-1
fixed
bullseye
no-dsa
sid
2.11.7+dfsg1-4
fixed
trixie
2.11.7+dfsg1-4
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
freerdp
bionic
not-affected
focal
dne
jammy
dne
kinetic
dne
trusty
ignored
xenial
not-affected
freerdp2
bionic
Fixed 2.2.0+dfsg1-0ubuntu0.18.04.4
released
focal
Fixed 2.2.0+dfsg1-0ubuntu0.20.04.4
released
jammy
Fixed 2.6.1+dfsg1-3ubuntu2.3
released
kinetic
Fixed 2.8.1+dfsg1-0ubuntu1.1
released
trusty
ignored
xenial
ignored
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
freerdp
suse enterprise desktop 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise desktop 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise sap 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise sap 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise server 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise server 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise workstation 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise workstation 15 SP5
2.4.0-150400.3.18.1
fixed
freerdp-devel
suse enterprise desktop 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise desktop 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise sap 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise sap 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise server 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise server 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise workstation 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise workstation 15 SP5
2.4.0-150400.3.18.1
fixed
freerdp-proxy
suse enterprise desktop 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise desktop 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise sap 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise sap 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise server 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise server 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise workstation 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise workstation 15 SP5
2.4.0-150400.3.18.1
fixed
libfreerdp2
suse enterprise desktop 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise desktop 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise sap 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise sap 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise server 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise server 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise workstation 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise workstation 15 SP5
2.4.0-150400.3.18.1
fixed
libwinpr2
suse enterprise desktop 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise desktop 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise sap 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise sap 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise server 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise server 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise workstation 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise workstation 15 SP5
2.4.0-150400.3.18.1
fixed
winpr2-devel
suse enterprise desktop 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise desktop 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise sap 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise sap 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise server 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise server 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise workstation 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise workstation 15 SP5
2.4.0-150400.3.18.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
freerdp
RHEL 8
2:2.2.0-10.el8
fixed
RHEL 9
2:2.4.1-5.el9
fixed
freerdp-devel
RHEL 8
2:2.2.0-10.el8
fixed
RHEL 9
2:2.4.1-5.el9
fixed
freerdp-libs
RHEL 8
2:2.2.0-10.el8
fixed
RHEL 9
2:2.4.1-5.el9
fixed
libwinpr
RHEL 8
2:2.2.0-10.el8
fixed
RHEL 9
2:2.4.1-5.el9
fixed
libwinpr-devel
RHEL 8
2:2.2.0-10.el8
fixed
RHEL 9
2:2.4.1-5.el9
fixed
Common Weakness Enumeration
References
https://github.com/FreeRDP/FreeRDP/commit/e865c24efc40ebc52e75979c94cdd4ee2c1495b0
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5w4j-mrrh-jjrm
https://lists.debian.org/debian-lts-announce/2023/11/msg00010.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UDOTAOJBCZKREZJPT6VZ25GESI5T6RBG/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGQN3OWQNHSMWKOF4D35PF5ASKNLC74B/
https://security.gentoo.org/glsa/202401-16
https://github.com/FreeRDP/FreeRDP/commit/e865c24efc40ebc52e75979c94cdd4ee2c1495b0
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5w4j-mrrh-jjrm
https://lists.debian.org/debian-lts-announce/2023/11/msg00010.html
https://lists.debian.org/debian-lts-announce/2025/02/msg00016.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UDOTAOJBCZKREZJPT6VZ25GESI5T6RBG/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGQN3OWQNHSMWKOF4D35PF5ASKNLC74B/
https://security.gentoo.org/glsa/202401-16