{"id":"CVE-2022-39347","aliases":["ALPINE-CVE-2022-39347","ALSA-2023:2326","ALSA-2023:2851","DEBIAN-CVE-2022-39347","DLA-3654-1","DLA-4053-1","EUVD-2022-41819","GHSA-c5xq-8v35-pffg","MGASA-2022-0447","OESA-2022-2112","RHSA-2023:2326","RHSA-2023:2851","RLSA-2023:2851","SUSE-SU-2023:0399-1","SUSE-SU-2023:0400-1","UBUNTU-CVE-2022-39347","USN-5734-1"],"status":"published","title":"Missing path sanitation with `drive` channel in FreeRDP","description":"FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicalization and base path check for `drive` channel. A malicious server can trick a FreeRDP based client to read files outside the shared directory. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/drive`, `/drives` or `+home-drive` redirection switch.","severity":{"version":"3.1","score":2.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00993,"percentile":0.62846,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-22"],"published":"2022-11-16T00:00:00Z","modified":"2026-11-03T08:00:12Z","fixes":[{"ecosystem":"Alpine:v3.17","package":"freerdp","fixed_in":["2.9.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"freerdp","fixed_in":["2.9.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"freerdp","fixed_in":["2.9.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"freerdp","fixed_in":["2.9.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"freerdp","fixed_in":["2.9.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"freerdp","fixed_in":["2.9.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"freerdp","fixed_in":["2.9.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"freerdp","fixed_in":["2.9.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"freerdp2","fixed_in":["2.9.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"freerdp2","fixed_in":["2.9.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"freerdp2","fixed_in":["2.9.0-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"freerdp2","fixed_in":["2.9.0+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"freerdp2","fixed_in":["2.2.0+dfsg1-0ubuntu0.18.04.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"freerdp2","fixed_in":["2.2.0+dfsg1-0ubuntu0.20.04.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"freerdp2","fixed_in":["2.6.1+dfsg1-3ubuntu2.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.17","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"freerdp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"freerdp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libwinpr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libwinpr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"freerdp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"freerdp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libwinpr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libwinpr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Debian:12","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0+dfsg1-2+deb10u4"}]}],"versions":["2.0.0~git20190204.1.2693389a+dfsg1-1","2.0.0~git20190204.1.2693389a+dfsg1-1+deb10u1","2.0.0~git20190204.1.2693389a+dfsg1-1+deb10u2","2.0.0~git20190204.1.2693389a+dfsg1-2","2.0.0~git20190204.1.2693389a+dfsg1-2~bpo10+1","2.1.1+dfsg1-1","2.1.2+dfsg1-1","2.1.2+dfsg1-2","2.2.0+dfsg1-1","2.2.0+dfsg1-1~bpo10+1","2.3.0+dfsg1-1","2.3.0+dfsg1-1~bpo10+1","2.3.0+dfsg1-2","2.3.0+dfsg1-2+deb10u3"],"bundled":9},{"source":"osv","ecosystem":"Debian:11","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0+dfsg1-2+deb11u2"}]}],"versions":["2.3.0+dfsg1-2","2.3.0+dfsg1-2+deb11u1"],"bundled":32},{"source":"osv","ecosystem":"Mageia:8","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-1.4.mga8"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-2.oe1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-2.oe1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-2.oe2203"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freerdp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freerdp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freerdp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libwinpr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libwinpr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"freerdp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"freerdp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"freerdp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libwinpr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libwinpr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"freerdp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"freerdp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"freerdp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libwinpr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libwinpr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libwinpr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"freerdp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"freerdp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"freerdp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libwinpr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-150400.3.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP4","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-150400.3.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-150400.3.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-12.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-12.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1","1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2","1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.3","1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0+dfsg1-0ubuntu0.18.04.4"}]}],"versions":["2.0.0~git20170725.1.1648deb+dfsg1-1","2.0.0~git20170725.1.1648deb+dfsg1-5","2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu1","2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu2","2.0.0~git20170725.1.1648deb+dfsg1-6","2.0.0~git20170725.1.1648deb+dfsg1-6build1","2.0.0~git20170725.1.1648deb+dfsg1-7","2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1","2.1.1+dfsg1-0ubuntu0.18.04.1","2.2.0+dfsg1-0ubuntu0.18.04.1","2.2.0+dfsg1-0ubuntu0.18.04.2","2.2.0+dfsg1-0ubuntu0.18.04.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1","1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1","1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0+dfsg1-0ubuntu0.20.04.4"}]}],"versions":["2.0.0~git20190204.1.2693389a+dfsg1-1","2.0.0~git20190204.1.2693389a+dfsg1-2","2.0.0~git20190204.1.2693389a+dfsg1-2build1","2.0.0~git20190204.1.2693389a+dfsg1-2build2","2.1.1+dfsg1-0ubuntu0.20.04.1","2.2.0+dfsg1-0ubuntu0.20.04.1","2.2.0+dfsg1-0ubuntu0.20.04.2","2.2.0+dfsg1-0ubuntu0.20.04.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1+dfsg1-3ubuntu2.3"}]}],"versions":["2.3.0+dfsg1-2build1","2.3.0+dfsg1-2ubuntu1","2.3.0+dfsg1-2ubuntu2","2.4.1+dfsg1-1","2.4.1+dfsg1-1ubuntu1","2.4.1+dfsg1-1ubuntu2","2.5.0+dfsg1-1","2.6.0+dfsg1-1","2.6.1+dfsg1-1","2.6.1+dfsg1-3","2.6.1+dfsg1-3ubuntu1","2.6.1+dfsg1-3ubuntu2","2.6.1+dfsg1-3ubuntu2.1","2.6.1+dfsg1-3ubuntu2.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0+dfsg1-0ubuntu0.18.04.4"}]}],"versions":["2.0.0~git20170725.1.1648deb+dfsg1-1","2.0.0~git20170725.1.1648deb+dfsg1-5","2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu1","2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu2","2.0.0~git20170725.1.1648deb+dfsg1-6","2.0.0~git20170725.1.1648deb+dfsg1-6build1","2.0.0~git20170725.1.1648deb+dfsg1-7","2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1","2.1.1+dfsg1-0ubuntu0.18.04.1","2.2.0+dfsg1-0ubuntu0.18.04.1","2.2.0+dfsg1-0ubuntu0.18.04.2","2.2.0+dfsg1-0ubuntu0.18.04.3"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0+dfsg1-0ubuntu0.20.04.4"}]}],"versions":["2.0.0~git20190204.1.2693389a+dfsg1-1","2.0.0~git20190204.1.2693389a+dfsg1-2","2.0.0~git20190204.1.2693389a+dfsg1-2build1","2.0.0~git20190204.1.2693389a+dfsg1-2build2","2.1.1+dfsg1-0ubuntu0.20.04.1","2.2.0+dfsg1-0ubuntu0.20.04.1","2.2.0+dfsg1-0ubuntu0.20.04.2","2.2.0+dfsg1-0ubuntu0.20.04.3"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1+dfsg1-3ubuntu2.3"}]}],"versions":["2.3.0+dfsg1-2build1","2.3.0+dfsg1-2ubuntu1","2.3.0+dfsg1-2ubuntu2","2.4.1+dfsg1-1","2.4.1+dfsg1-1ubuntu1","2.4.1+dfsg1-1ubuntu2","2.5.0+dfsg1-1","2.6.0+dfsg1-1","2.6.1+dfsg1-1","2.6.1+dfsg1-3","2.6.1+dfsg1-3ubuntu1","2.6.1+dfsg1-3ubuntu2","2.6.1+dfsg1-3ubuntu2.1","2.6.1+dfsg1-3ubuntu2.2"],"bundled":8}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"freerdp","product":"freerdp"}],"references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c5xq-8v35-pffg","tags":["x_transferred","Third Party Advisory","advisory","article","report"]},{"url":"https://github.com/FreeRDP/FreeRDP/commit/027424c2c6c0991cb9c22f9511478229c9b17e5d","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UDOTAOJBCZKREZJPT6VZ25GESI5T6RBG/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGQN3OWQNHSMWKOF4D35PF5ASKNLC74B/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/11/msg00010.html","tags":["mailing-list","x_transferred","article"]},{"url":"https://security.gentoo.org/glsa/202401-16","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/02/msg00016.html","tags":["web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-39347","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2326","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-39282","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-39283","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-39316","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-39317","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-39318","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-39319","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-39320","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-39347","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41877","tags":["report"]},{"url":"https://bugzilla.redhat.com/2134713","tags":["report"]},{"url":"https://bugzilla.redhat.com/2134717","tags":["report"]},{"url":"https://bugzilla.redhat.com/2143642","tags":["report"]},{"url":"https://bugzilla.redhat.com/2143643","tags":["report"]},{"url":"https://bugzilla.redhat.com/2143644","tags":["report"]},{"url":"https://bugzilla.redhat.com/2143645","tags":["report"]},{"url":"https://bugzilla.redhat.com/2143646","tags":["report"]},{"url":"https://bugzilla.redhat.com/2143647","tags":["report"]},{"url":"https://bugzilla.redhat.com/2143648","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-2326.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2851","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-2851.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39347.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-39347","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-39347","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0447.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31173","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5734-1","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5w4j-mrrh-jjrm","tags":["advisory","article"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-99cm-4gw7-c8jh","tags":["advisory","article"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-387j-8j96-7q35","tags":["advisory","article"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mvxm-wfj2-5fvh","tags":["advisory","article"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qfq2-82qr-7f4j","tags":["advisory","article"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2112","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-39316","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-39319","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41877","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-39318","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2134713","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2134717","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143644","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143646","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143647","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143648","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2326.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-39282","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-39282","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c45q-wcpg-mxjq","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-39283","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-39283","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6cf9-3328-qrvh","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-39316","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-39317","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-39317","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-39318","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-39319","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-39320","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-39320","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-39347","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41877","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pmv3-wpw4-pw5h","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.8_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2851.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:2851","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230399-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1205512","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-39316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-39317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-39320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-39347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41877","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230400-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-39347","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-39282","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-39283","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-39316","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-39317","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-39318","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-39319","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-39320","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-39347","title":"Missing path sanitation with `drive` channel in FreeRDP","description":"FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicalization and base path check for `drive` channel. A malicious server can trick a FreeRDP based client to read files outside the shared directory. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/drive`, `/drives` or `+home-drive` redirection switch.","status":"published","published":"2022-11-16T00:00:00Z","modified":"2025-11-03T20:35:05.619Z","cvss":[{"version":"3.1","score":2.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:34:39.559326Z"}],"euvd":[{"id":"EUVD-2022-41819","description":"FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicalization and base path check for `drive` channel. A malicious server can trick a FreeRDP based client to read files outside the shared directory. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/drive`, `/drives` or `+home-drive` redirection switch.","status":"published","published":"2022-11-16T00:00:00Z","modified":"2025-11-03T20:35:05Z","cvss":[{"version":"3.1","score":2.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T19:49:32.503916Z"}],"nvd":[{"id":"CVE-2022-39347","description":"FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicalization and base path check for `drive` channel. A malicious server can trick a FreeRDP based client to read files outside the shared directory. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/drive`, `/drives` or `+home-drive` redirection switch.","status":"published","published":"2022-11-16T20:15:10.367Z","modified":"2026-06-17T04:58:11.363Z","cvss":[{"version":"3.1","score":2.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:07:32.395456Z"}],"osv":[{"id":"ALPINE-CVE-2022-39347","description":"FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicalization and base path check for `drive` channel. A malicious server can trick a FreeRDP based client to read files outside the shared directory. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/drive`, `/drives` or `+home-drive` redirection switch.","status":"published","published":"2022-11-16T20:15:10.367Z","modified":"2026-11-03T07:31:26.101698532Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T07:50:01.054176Z"},{"id":"CVE-2022-39347","title":"Missing path sanitation with `drive` channel in FreeRDP","description":"FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicalization and base path check for `drive` channel. A malicious server can trick a FreeRDP based client to read files outside the shared directory. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/drive`, `/drives` or `+home-drive` redirection switch.","status":"published","published":"2022-11-16T00:00:00Z","modified":"2026-10-28T10:28:26.86266792Z","cvss":[{"version":"3.1","score":2.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:44:26.860704Z"},{"id":"DEBIAN-CVE-2022-39347","description":"FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicalization and base path check for `drive` channel. A malicious server can trick a FreeRDP based client to read files outside the shared directory. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/drive`, `/drives` or `+home-drive` redirection switch.","status":"published","published":"2022-11-16T20:15:10.367Z","modified":"2026-11-03T08:00:12.880966708Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T08:25:15.646766Z"},{"id":"OESA-2022-2112","title":"freerdp security update","description":"FreeRDP is a client implementation of the Remote Desktop Protocol (RDP) that follows Microsoft's open specifications. This package provides the client applications xfreerdp and wlfreerdp.\r\n\r\nSecurity Fix(es):\r\n\r\nFreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicalization and base path check for `drive` channel. A malicious server can trick a FreeRDP based client to read files outside the shared directory. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/drive`, `/drives` or `+home-drive` redirection switch.(CVE-2022-39347)\r\n\r\nFreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGFX decoder component of FreeRDP. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it likely resulting in a crash. This issue has been addressed in the 2.9.0 release. Users are advised to upgrade.(CVE-2022-39316)\r\n\r\nFreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in the `urbdrc` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/usb` redirection switch.(CVE-2022-39319)\r\n\r\nFreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in `drive` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the drive redirection channel - command line options `/drive`, `+drives` or `+home-drive`.(CVE-2022-41877)\r\n\r\nFreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input validation in `urbdrc` channel. A malicious server can trick a FreeRDP based client to crash with division by zero. This issue has been addressed in version 2.9.0. All users are advised to upgrade. Users unable to upgrade should not use the `/usb` redirection switch.(CVE-2022-39318)","status":"published","published":"2022-11-25T11:05:25Z","modified":"2026-08-18T01:17:26.893902696Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2023:2326","title":"Red Hat Security Advisory: freerdp security update","status":"published","published":"2024-09-16T09:59:34Z","modified":"2026-06-27T10:16:53Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:2851","title":"Red Hat Security Advisory: freerdp security update","status":"published","published":"2024-09-16T09:59:44Z","modified":"2026-06-27T10:17:09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RLSA-2023:2851","title":"Moderate: freerdp security update","description":"FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.\n\nSecurity Fix(es):\n\n* freerdp: clients using `/parallel` command line switch might read uninitialized data (CVE-2022-39282)\n\n* freerdp: clients using the `/video` command line switch might read uninitialized data (CVE-2022-39283)\n\n* freerdp: out of bounds read in zgfx decoder (CVE-2022-39316)\n\n* freerdp: undefined behaviour in zgfx decoder (CVE-2022-39317)\n\n* freerdp: division by zero in urbdrc channel (CVE-2022-39318)\n\n* freerdp: missing length validation in urbdrc channel (CVE-2022-39319)\n\n* freerdp: heap buffer overflow in urbdrc channel (CVE-2022-39320)\n\n* freerdp: missing path sanitation with `drive` channel (CVE-2022-39347)\n\n* freerdp: missing input length validation in `drive` channel (CVE-2022-41877)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.","status":"published","published":"2026-06-25T12:01:05.792943Z","modified":"2026-06-25T12:30:04.275974952Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2022-39347","description":"FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicalization and base path check for `drive` channel. A malicious server can trick a FreeRDP based client to read files outside the shared directory. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/drive`, `/drives` or `+home-drive` redirection switch.","status":"published","published":"2022-11-17T00:00:00Z","modified":"2026-04-22T13:28:10.171074Z","cvss":[{"version":"3.1","score":2.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","level":"low"},{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:53:55.502114Z"},{"id":"ALSA-2023:2326","title":"Moderate: freerdp security update","description":"FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.\n\nSecurity Fix(es):\n\n* freerdp: clients using `/parallel` command line switch might read uninitialized data (CVE-2022-39282)\n* freerdp: clients using the `/video` command line switch might read uninitialized data (CVE-2022-39283)\n* freerdp: out of bounds read in zgfx decoder (CVE-2022-39316)\n* freerdp: undefined behaviour in zgfx decoder (CVE-2022-39317)\n* freerdp: division by zero in urbdrc channel (CVE-2022-39318)\n* freerdp: missing length validation in urbdrc channel (CVE-2022-39319)\n* freerdp: heap buffer overflow in urbdrc channel (CVE-2022-39320)\n* freerdp: missing path sanitation with `drive` channel (CVE-2022-39347)\n* freerdp: missing input length validation in `drive` channel (CVE-2022-41877)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-09T00:00:00Z","modified":"2026-10-29T11:30:55.392282272Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:2851","title":"Moderate: freerdp security update","description":"FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.\n\nSecurity Fix(es):\n\n* freerdp: clients using `/parallel` command line switch might read uninitialized data (CVE-2022-39282)\n* freerdp: clients using the `/video` command line switch might read uninitialized data (CVE-2022-39283)\n* freerdp: out of bounds read in zgfx decoder (CVE-2022-39316)\n* freerdp: undefined behaviour in zgfx decoder (CVE-2022-39317)\n* freerdp: division by zero in urbdrc channel (CVE-2022-39318)\n* freerdp: missing length validation in urbdrc channel (CVE-2022-39319)\n* freerdp: heap buffer overflow in urbdrc channel (CVE-2022-39320)\n* freerdp: missing path sanitation with `drive` channel (CVE-2022-39347)\n* freerdp: missing input length validation in `drive` channel (CVE-2022-41877)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-16T00:00:00Z","modified":"2026-10-29T11:02:04.895389052Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"DLA-3654-1","title":"freerdp2 - security update","status":"published","published":"2023-11-17T00:00:00Z","modified":"2026-03-09T01:20:39.038402Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DLA-4053-1","title":"freerdp2 - security update","status":"published","published":"2025-02-15T00:00:00Z","modified":"2026-03-09T01:19:24.57066Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2022-0447","title":"Updated freerdp packages fix security vulnerability","description":"In affected versions there is an out of bound read in ZGFX decoder\ncomponent of FreeRDP. A malicious server can trick a FreeRDP based client\nto read out of bound data and try to decode it likely resulting in a\ncrash. (CVE-2022-39316)\n\nAffected versions of FreeRDP are missing a range check for input offset\nindex in ZGFX decoder. A malicious server can trick a FreeRDP based client\nto read out of bound data and try to decode it. (CVE-2022-39317)\n\nAffected versions of FreeRDP are missing input validation in 'urbdrc'\nchannel. A malicious server can trick a FreeRDP based client to crash with\ndivision by zero. (CVE-2022-39318)\n\nAffected versions of FreeRDP are missing input length validation in the\n'urbdrc' channel. A malicious server can trick a FreeRDP based client to\nread out of bound data and send it back to the server. (CVE-2022-39319)\n\nAffected versions of FreeRDP may attempt integer addition on too narrow\ntypes leads to allocation of a buffer too small holding the data written.\nA malicious server can trick a FreeRDP based client to read out of bound\ndata and send it back to the server. (CVE-2022-39320)\n\nAffected versions of FreeRDP are missing path canonicalization and base\npath check for `drive` channel. A malicious server can trick a FreeRDP\nbased client to read files outside the shared directory. (CVE-2022-39347)\n","status":"published","published":"2022-12-06T23:32:48Z","modified":"2026-04-16T04:42:25.538257552Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"SUSE-SU-2023:0399-1","title":"Security update for freerdp","description":"This update for freerdp fixes the following issues:\n\n- CVE-2022-39316: Fixed out of bound read in zgfx decoder (bsc#1205512).\n- CVE-2022-39317: Fixed undefined behaviour in zgfx decoder (bsc#1205512).\n- CVE-2022-39320: Fixed heap buffer overflow in urbdrc channel (bsc#1205512).\n- CVE-2022-39347: Fixed missing path sanitation with drive channel (bsc#1205512).\n- CVE-2022-41877: Fixed missing input length validation in drive channel (bsc#1205512).\n","status":"published","published":"2023-02-13T15:17:39Z","modified":"2026-02-04T02:29:38.497287Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0400-1","title":"Security update for freerdp","description":"This update for freerdp fixes the following issues:\n\n- CVE-2022-39316: Fixed out of bound read in zgfx decoder (bsc#1205512).\n- CVE-2022-39317: Fixed undefined behaviour in zgfx decoder (bsc#1205512).\n- CVE-2022-39320: Fixed heap buffer overflow in urbdrc channel (bsc#1205512).\n- CVE-2022-39347: Fixed missing path sanitation with drive channel (bsc#1205512).\n- CVE-2022-41877: Fixed missing input length validation in drive channel (bsc#1205512).\n","status":"published","published":"2023-02-13T15:17:53Z","modified":"2026-02-04T04:03:39.410745Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"USN-5734-1","title":"freerdp2 vulnerabilities","description":"It was discovered that FreeRDP incorrectly handled certain data lenghts. A\nmalicious server could use this issue to cause FreeRDP clients to crash,\nresulting in a denial of service, or possibly obtain sensitive information.\nThis issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu\n22.04 LTS. (CVE-2022-39282, CVE-2022-39283)\n\nIt was discovered that FreeRDP incorrectly handled certain data lenghts. A\nmalicious server could use this issue to cause FreeRDP clients to crash,\nresulting in a denial of service, or possibly obtain sensitive information.\n(CVE-2022-39316, CVE-2022-39317, CVE-2022-39318, CVE-2022-39319,\nCVE-2022-39320)\n\nIt was discovered that FreeRDP incorrectly handled certain path checks. A\nmalicious server could use this issue to cause FreeRDP clients to read\nfiles outside of the shared directory. (CVE-2022-39347)\n","status":"published","published":"2022-11-22T13:48:33Z","modified":"2026-04-27T16:32:23.705649532Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}