CVE-2022-39317

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing a range check for input offset index in ZGFX decoder. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it. This issue has been addressed in version 2.9.0. There are no known workarounds for this issue.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.6 MEDIUM
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 19%
Affected Products (NVD)
VendorProductVersion
freerdpfreerdp
𝑥
< 2.9.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
freerdp2
bookworm
2.10.0+dfsg1-1
fixed
bullseye
no-dsa
buster
no-dsa
sid
2.11.7+dfsg1-4
fixed
trixie
2.11.7+dfsg1-4
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
freerdp
bionic
needs-triage
focal
dne
jammy
dne
kinetic
dne
trusty
ignored
xenial
needs-triage
freerdp2
bionic
Fixed 2.2.0+dfsg1-0ubuntu0.18.04.4
released
focal
Fixed 2.2.0+dfsg1-0ubuntu0.20.04.4
released
jammy
Fixed 2.6.1+dfsg1-3ubuntu2.3
released
kinetic
Fixed 2.8.1+dfsg1-0ubuntu1.1
released
lunar
Fixed 2.8.1+dfsg1-1ubuntu1
released
mantic
Fixed 2.8.1+dfsg1-1ubuntu1
released
noble
Fixed 2.8.1+dfsg1-1ubuntu1
released
trusty
ignored
xenial
ignored
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
freerdp
suse enterprise desktop 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise desktop 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise sap 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise sap 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise server 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise server 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise workstation 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise workstation 15 SP5
2.4.0-150400.3.18.1
fixed
freerdp-devel
suse enterprise desktop 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise desktop 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise sap 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise sap 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise server 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise server 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise workstation 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise workstation 15 SP5
2.4.0-150400.3.18.1
fixed
freerdp-proxy
suse enterprise desktop 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise desktop 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise sap 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise sap 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise server 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise server 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise workstation 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise workstation 15 SP5
2.4.0-150400.3.18.1
fixed
libfreerdp2
suse enterprise desktop 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise desktop 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise sap 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise sap 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise server 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise server 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise workstation 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise workstation 15 SP5
2.4.0-150400.3.18.1
fixed
libwinpr2
suse enterprise desktop 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise desktop 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise sap 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise sap 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise server 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise server 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise workstation 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise workstation 15 SP5
2.4.0-150400.3.18.1
fixed
winpr2-devel
suse enterprise desktop 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise desktop 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise sap 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise sap 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise server 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise server 15 SP5
2.4.0-150400.3.18.1
fixed
suse enterprise workstation 15 SP4
2.4.0-150400.3.18.1
fixed
suse enterprise workstation 15 SP5
2.4.0-150400.3.18.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
freerdp
RHEL 8
2:2.2.0-10.el8
fixed
RHEL 9
2:2.4.1-5.el9
fixed
freerdp-devel
RHEL 8
2:2.2.0-10.el8
fixed
RHEL 9
2:2.4.1-5.el9
fixed
freerdp-libs
RHEL 8
2:2.2.0-10.el8
fixed
RHEL 9
2:2.4.1-5.el9
fixed
libwinpr
RHEL 8
2:2.2.0-10.el8
fixed
RHEL 9
2:2.4.1-5.el9
fixed
libwinpr-devel
RHEL 8
2:2.2.0-10.el8
fixed
RHEL 9
2:2.4.1-5.el9
fixed
Common Weakness Enumeration
References
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-99cm-4gw7-c8jh
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UDOTAOJBCZKREZJPT6VZ25GESI5T6RBG/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGQN3OWQNHSMWKOF4D35PF5ASKNLC74B/
https://security.gentoo.org/glsa/202401-16
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-99cm-4gw7-c8jh
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UDOTAOJBCZKREZJPT6VZ25GESI5T6RBG/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGQN3OWQNHSMWKOF4D35PF5ASKNLC74B/
https://security.gentoo.org/glsa/202401-16