CVE-2022-39319

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in the `urbdrc` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/usb` redirection switch.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.6 MEDIUM
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 30%
Affected Products (NVD)
VendorProductVersion
freerdpfreerdp
𝑥
< 2.9.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
freerdp2
bookworm
2.10.0+dfsg1-1
fixed
bullseye
no-dsa
sid
2.11.7+dfsg1-4
fixed
trixie
2.11.7+dfsg1-4
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
freerdp
bionic
needed
focal
dne
jammy
dne
kinetic
dne
trusty
ignored
xenial
needed
freerdp2
bionic
Fixed 2.2.0+dfsg1-0ubuntu0.18.04.4
released
focal
Fixed 2.2.0+dfsg1-0ubuntu0.20.04.4
released
jammy
Fixed 2.6.1+dfsg1-3ubuntu2.3
released
kinetic
Fixed 2.8.1+dfsg1-0ubuntu1.1
released
lunar
Fixed 2.8.1+dfsg1-1ubuntu1
released
mantic
Fixed 2.8.1+dfsg1-1ubuntu1
released
noble
Fixed 2.8.1+dfsg1-1ubuntu1
released
trusty
ignored
xenial
ignored
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
freerdp
suse enterprise desktop 15 SP3
2.1.2-150200.15.24.1
fixed
suse enterprise desktop 15 SP4
2.4.0-150400.3.12.1
fixed
suse enterprise desktop 15 SP5
2.4.0-150400.3.12.1
fixed
suse enterprise sap 15 SP3
2.1.2-150200.15.24.1
fixed
suse enterprise sap 15 SP4
2.4.0-150400.3.12.1
fixed
suse enterprise sap 15 SP5
2.4.0-150400.3.12.1
fixed
suse enterprise server 15 SP3
2.1.2-150200.15.24.1
fixed
suse enterprise server 15 SP4
2.4.0-150400.3.12.1
fixed
suse enterprise server 15 SP5
2.4.0-150400.3.12.1
fixed
suse enterprise workstation 15 SP3
2.1.2-150200.15.24.1
fixed
suse enterprise workstation 15 SP4
2.4.0-150400.3.12.1
fixed
suse enterprise workstation 15 SP5
2.4.0-150400.3.12.1
fixed
freerdp-devel
suse enterprise desktop 15 SP3
2.1.2-150200.15.24.1
fixed
suse enterprise desktop 15 SP4
2.4.0-150400.3.12.1
fixed
suse enterprise desktop 15 SP5
2.4.0-150400.3.12.1
fixed
suse enterprise sap 15 SP3
2.1.2-150200.15.24.1
fixed
suse enterprise sap 15 SP4
2.4.0-150400.3.12.1
fixed
suse enterprise sap 15 SP5
2.4.0-150400.3.12.1
fixed
suse enterprise server 15 SP3
2.1.2-150200.15.24.1
fixed
suse enterprise server 15 SP4
2.4.0-150400.3.12.1
fixed
suse enterprise server 15 SP5
2.4.0-150400.3.12.1
fixed
suse enterprise workstation 15 SP3
2.1.2-150200.15.24.1
fixed
suse enterprise workstation 15 SP4
2.4.0-150400.3.12.1
fixed
suse enterprise workstation 15 SP5
2.4.0-150400.3.12.1
fixed
freerdp-proxy
suse enterprise desktop 15 SP3
2.1.2-150200.15.24.1
fixed
suse enterprise desktop 15 SP4
2.4.0-150400.3.12.1
fixed
suse enterprise desktop 15 SP5
2.4.0-150400.3.12.1
fixed
suse enterprise sap 15 SP3
2.1.2-150200.15.24.1
fixed
suse enterprise sap 15 SP4
2.4.0-150400.3.12.1
fixed
suse enterprise sap 15 SP5
2.4.0-150400.3.12.1
fixed
suse enterprise server 15 SP3
2.1.2-150200.15.24.1
fixed
suse enterprise server 15 SP4
2.4.0-150400.3.12.1
fixed
suse enterprise server 15 SP5
2.4.0-150400.3.12.1
fixed
suse enterprise workstation 15 SP3
2.1.2-150200.15.24.1
fixed
suse enterprise workstation 15 SP4
2.4.0-150400.3.12.1
fixed
suse enterprise workstation 15 SP5
2.4.0-150400.3.12.1
fixed
libfreerdp2
suse enterprise desktop 15 SP3
2.1.2-150200.15.24.1
fixed
suse enterprise desktop 15 SP4
2.4.0-150400.3.12.1
fixed
suse enterprise desktop 15 SP5
2.4.0-150400.3.12.1
fixed
suse enterprise sap 15 SP3
2.1.2-150200.15.24.1
fixed
suse enterprise sap 15 SP4
2.4.0-150400.3.12.1
fixed
suse enterprise sap 15 SP5
2.4.0-150400.3.12.1
fixed
suse enterprise server 15 SP3
2.1.2-150200.15.24.1
fixed
suse enterprise server 15 SP4
2.4.0-150400.3.12.1
fixed
suse enterprise server 15 SP5
2.4.0-150400.3.12.1
fixed
suse enterprise workstation 15 SP3
2.1.2-150200.15.24.1
fixed
suse enterprise workstation 15 SP4
2.4.0-150400.3.12.1
fixed
suse enterprise workstation 15 SP5
2.4.0-150400.3.12.1
fixed
libwinpr2
suse enterprise desktop 15 SP3
2.1.2-150200.15.24.1
fixed
suse enterprise desktop 15 SP4
2.4.0-150400.3.12.1
fixed
suse enterprise desktop 15 SP5
2.4.0-150400.3.12.1
fixed
suse enterprise sap 15 SP3
2.1.2-150200.15.24.1
fixed
suse enterprise sap 15 SP4
2.4.0-150400.3.12.1
fixed
suse enterprise sap 15 SP5
2.4.0-150400.3.12.1
fixed
suse enterprise server 15 SP3
2.1.2-150200.15.24.1
fixed
suse enterprise server 15 SP4
2.4.0-150400.3.12.1
fixed
suse enterprise server 15 SP5
2.4.0-150400.3.12.1
fixed
suse enterprise workstation 15 SP3
2.1.2-150200.15.24.1
fixed
suse enterprise workstation 15 SP4
2.4.0-150400.3.12.1
fixed
suse enterprise workstation 15 SP5
2.4.0-150400.3.12.1
fixed
winpr2-devel
suse enterprise desktop 15 SP3
2.1.2-150200.15.24.1
fixed
suse enterprise desktop 15 SP4
2.4.0-150400.3.12.1
fixed
suse enterprise desktop 15 SP5
2.4.0-150400.3.12.1
fixed
suse enterprise sap 15 SP3
2.1.2-150200.15.24.1
fixed
suse enterprise sap 15 SP4
2.4.0-150400.3.12.1
fixed
suse enterprise sap 15 SP5
2.4.0-150400.3.12.1
fixed
suse enterprise server 15 SP3
2.1.2-150200.15.24.1
fixed
suse enterprise server 15 SP4
2.4.0-150400.3.12.1
fixed
suse enterprise server 15 SP5
2.4.0-150400.3.12.1
fixed
suse enterprise workstation 15 SP3
2.1.2-150200.15.24.1
fixed
suse enterprise workstation 15 SP4
2.4.0-150400.3.12.1
fixed
suse enterprise workstation 15 SP5
2.4.0-150400.3.12.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
freerdp
RHEL 8
2:2.2.0-10.el8
fixed
RHEL 9
2:2.4.1-5.el9
fixed
freerdp-devel
RHEL 8
2:2.2.0-10.el8
fixed
RHEL 9
2:2.4.1-5.el9
fixed
freerdp-libs
RHEL 8
2:2.2.0-10.el8
fixed
RHEL 9
2:2.4.1-5.el9
fixed
libwinpr
RHEL 8
2:2.2.0-10.el8
fixed
RHEL 9
2:2.4.1-5.el9
fixed
libwinpr-devel
RHEL 8
2:2.2.0-10.el8
fixed
RHEL 9
2:2.4.1-5.el9
fixed
Common Weakness Enumeration
References
https://github.com/FreeRDP/FreeRDP/commit/11555828d2cf289b350baba5ad1f462f10b80b76
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mvxm-wfj2-5fvh
https://lists.debian.org/debian-lts-announce/2023/11/msg00010.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UDOTAOJBCZKREZJPT6VZ25GESI5T6RBG/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGQN3OWQNHSMWKOF4D35PF5ASKNLC74B/
https://security.gentoo.org/glsa/202401-16
https://github.com/FreeRDP/FreeRDP/commit/11555828d2cf289b350baba5ad1f462f10b80b76
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mvxm-wfj2-5fvh
https://lists.debian.org/debian-lts-announce/2023/11/msg00010.html
https://lists.debian.org/debian-lts-announce/2025/02/msg00016.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UDOTAOJBCZKREZJPT6VZ25GESI5T6RBG/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGQN3OWQNHSMWKOF4D35PF5ASKNLC74B/
https://security.gentoo.org/glsa/202401-16