{"id":"CVE-2022-41877","aliases":["ALPINE-CVE-2022-41877","ALSA-2023:2326","ALSA-2023:2851","DEBIAN-CVE-2022-41877","DLA-3654-1","DLA-4053-1","EUVD-2022-45039","GHSA-pmv3-wpw4-pw5h","MGASA-2022-0474","OESA-2022-2112","RHSA-2023:2326","RHSA-2023:2851","RLSA-2023:2851","SUSE-SU-2023:0399-1","SUSE-SU-2023:0400-1","UBUNTU-CVE-2022-41877","USN-6522-1","USN-6522-2"],"status":"published","title":"Missing input length validation in `drive` channel in FreeRDP","description":"FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in `drive` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the drive redirection channel - command line options `/drive`, `+drives` or `+home-drive`.","severity":{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00803,"percentile":0.56958,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-1284"],"published":"2022-11-16T00:00:00Z","modified":"2026-11-03T08:04:10Z","fixes":[{"ecosystem":"Alpine:v3.17","package":"freerdp","fixed_in":["2.9.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"freerdp","fixed_in":["2.9.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"freerdp","fixed_in":["2.9.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"freerdp","fixed_in":["2.9.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"freerdp","fixed_in":["2.9.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"freerdp","fixed_in":["2.9.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"freerdp","fixed_in":["2.9.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"freerdp","fixed_in":["2.9.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"freerdp2","fixed_in":["2.9.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"freerdp2","fixed_in":["2.9.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"freerdp2","fixed_in":["2.9.0-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"freerdp2","fixed_in":["2.9.0+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"freerdp","fixed_in":["2.2.0-1.5.mga8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"freerdp2","fixed_in":["2.2.0+dfsg1-0ubuntu0.18.04.4+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"freerdp2","fixed_in":["2.2.0+dfsg1-0ubuntu0.20.04.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"freerdp2","fixed_in":["2.6.1+dfsg1-3ubuntu2.5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.17","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"freerdp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"freerdp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libwinpr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libwinpr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"freerdp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"freerdp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libwinpr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libwinpr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Debian:12","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0+dfsg1-2+deb10u4"}]}],"versions":["2.0.0~git20190204.1.2693389a+dfsg1-1","2.0.0~git20190204.1.2693389a+dfsg1-1+deb10u1","2.0.0~git20190204.1.2693389a+dfsg1-1+deb10u2","2.0.0~git20190204.1.2693389a+dfsg1-2","2.0.0~git20190204.1.2693389a+dfsg1-2~bpo10+1","2.1.1+dfsg1-1","2.1.2+dfsg1-1","2.1.2+dfsg1-2","2.2.0+dfsg1-1","2.2.0+dfsg1-1~bpo10+1","2.3.0+dfsg1-1","2.3.0+dfsg1-1~bpo10+1","2.3.0+dfsg1-2","2.3.0+dfsg1-2+deb10u3"],"bundled":9},{"source":"osv","ecosystem":"Debian:11","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0+dfsg1-2+deb11u2"}]}],"versions":["2.3.0+dfsg1-2","2.3.0+dfsg1-2+deb11u1"],"bundled":32},{"source":"osv","ecosystem":"Mageia:8","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-1.5.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-2.oe1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-2.oe1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-2.oe2203"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freerdp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freerdp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freerdp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libwinpr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libwinpr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"freerdp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"freerdp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"freerdp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libwinpr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libwinpr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.1-5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"freerdp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"freerdp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"freerdp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libwinpr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libwinpr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libwinpr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"freerdp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"freerdp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"freerdp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libwinpr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-10.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-150400.3.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP4","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-150400.3.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-150400.3.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-12.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-12.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0+dfsg1-0ubuntu0.18.04.4+esm2"}]}],"versions":["2.0.0~git20170725.1.1648deb+dfsg1-1","2.0.0~git20170725.1.1648deb+dfsg1-5","2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu1","2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu2","2.0.0~git20170725.1.1648deb+dfsg1-6","2.0.0~git20170725.1.1648deb+dfsg1-6build1","2.0.0~git20170725.1.1648deb+dfsg1-7","2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1","2.1.1+dfsg1-0ubuntu0.18.04.1","2.2.0+dfsg1-0ubuntu0.18.04.1","2.2.0+dfsg1-0ubuntu0.18.04.2","2.2.0+dfsg1-0ubuntu0.18.04.3","2.2.0+dfsg1-0ubuntu0.18.04.4","2.2.0+dfsg1-0ubuntu0.18.04.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0+dfsg1-0ubuntu0.20.04.6"}]}],"versions":["2.0.0~git20190204.1.2693389a+dfsg1-1","2.0.0~git20190204.1.2693389a+dfsg1-2","2.0.0~git20190204.1.2693389a+dfsg1-2build1","2.0.0~git20190204.1.2693389a+dfsg1-2build2","2.1.1+dfsg1-0ubuntu0.20.04.1","2.2.0+dfsg1-0ubuntu0.20.04.1","2.2.0+dfsg1-0ubuntu0.20.04.2","2.2.0+dfsg1-0ubuntu0.20.04.3","2.2.0+dfsg1-0ubuntu0.20.04.4","2.2.0+dfsg1-0ubuntu0.20.04.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1+dfsg1-3ubuntu2.5"}]}],"versions":["2.3.0+dfsg1-2build1","2.3.0+dfsg1-2ubuntu1","2.3.0+dfsg1-2ubuntu2","2.4.1+dfsg1-1","2.4.1+dfsg1-1ubuntu1","2.4.1+dfsg1-1ubuntu2","2.5.0+dfsg1-1","2.6.0+dfsg1-1","2.6.1+dfsg1-1","2.6.1+dfsg1-3","2.6.1+dfsg1-3ubuntu1","2.6.1+dfsg1-3ubuntu2","2.6.1+dfsg1-3ubuntu2.1","2.6.1+dfsg1-3ubuntu2.2","2.6.1+dfsg1-3ubuntu2.3","2.6.1+dfsg1-3ubuntu2.4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0+dfsg1-0ubuntu0.20.04.6"}]}],"versions":["2.0.0~git20190204.1.2693389a+dfsg1-1","2.0.0~git20190204.1.2693389a+dfsg1-2","2.0.0~git20190204.1.2693389a+dfsg1-2build1","2.0.0~git20190204.1.2693389a+dfsg1-2build2","2.1.1+dfsg1-0ubuntu0.20.04.1","2.2.0+dfsg1-0ubuntu0.20.04.1","2.2.0+dfsg1-0ubuntu0.20.04.2","2.2.0+dfsg1-0ubuntu0.20.04.3","2.2.0+dfsg1-0ubuntu0.20.04.4","2.2.0+dfsg1-0ubuntu0.20.04.5"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1+dfsg1-3ubuntu2.5"}]}],"versions":["2.3.0+dfsg1-2build1","2.3.0+dfsg1-2ubuntu1","2.3.0+dfsg1-2ubuntu2","2.4.1+dfsg1-1","2.4.1+dfsg1-1ubuntu1","2.4.1+dfsg1-1ubuntu2","2.5.0+dfsg1-1","2.6.0+dfsg1-1","2.6.1+dfsg1-1","2.6.1+dfsg1-3","2.6.1+dfsg1-3ubuntu1","2.6.1+dfsg1-3ubuntu2","2.6.1+dfsg1-3ubuntu2.1","2.6.1+dfsg1-3ubuntu2.2","2.6.1+dfsg1-3ubuntu2.3","2.6.1+dfsg1-3ubuntu2.4"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0+dfsg1-0ubuntu0.18.04.4+esm2"}]}],"versions":["2.0.0~git20170725.1.1648deb+dfsg1-1","2.0.0~git20170725.1.1648deb+dfsg1-5","2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu1","2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu2","2.0.0~git20170725.1.1648deb+dfsg1-6","2.0.0~git20170725.1.1648deb+dfsg1-6build1","2.0.0~git20170725.1.1648deb+dfsg1-7","2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1","2.1.1+dfsg1-0ubuntu0.18.04.1","2.2.0+dfsg1-0ubuntu0.18.04.1","2.2.0+dfsg1-0ubuntu0.18.04.2","2.2.0+dfsg1-0ubuntu0.18.04.3","2.2.0+dfsg1-0ubuntu0.18.04.4","2.2.0+dfsg1-0ubuntu0.18.04.4+esm1"],"bundled":3}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"freerdp","product":"freerdp"}],"references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pmv3-wpw4-pw5h","tags":["x_transferred","Third Party Advisory","advisory","article","report"]},{"url":"https://github.com/FreeRDP/FreeRDP/commit/6655841cf2a00b764f855040aecb8803cfc5eaba","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UDOTAOJBCZKREZJPT6VZ25GESI5T6RBG/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGQN3OWQNHSMWKOF4D35PF5ASKNLC74B/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/11/msg00010.html","tags":["mailing-list","x_transferred","article"]},{"url":"https://security.gentoo.org/glsa/202401-16","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/02/msg00016.html","tags":["web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-41877","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2326","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-39282","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-39283","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-39316","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-39317","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-39318","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-39319","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-39320","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-39347","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41877","tags":["report"]},{"url":"https://bugzilla.redhat.com/2134713","tags":["report"]},{"url":"https://bugzilla.redhat.com/2134717","tags":["report"]},{"url":"https://bugzilla.redhat.com/2143642","tags":["report"]},{"url":"https://bugzilla.redhat.com/2143643","tags":["report"]},{"url":"https://bugzilla.redhat.com/2143644","tags":["report"]},{"url":"https://bugzilla.redhat.com/2143645","tags":["report"]},{"url":"https://bugzilla.redhat.com/2143646","tags":["report"]},{"url":"https://bugzilla.redhat.com/2143647","tags":["report"]},{"url":"https://bugzilla.redhat.com/2143648","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-2326.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2851","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-2851.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41877.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41877","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-41877","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0474.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31290","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/YGQN3OWQNHSMWKOF4D35PF5ASKNLC74B/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2112","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-39347","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-39316","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-39319","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-39318","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2134713","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2134717","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143644","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143646","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143647","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143648","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2326.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-39282","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-39282","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c45q-wcpg-mxjq","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-39283","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-39283","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6cf9-3328-qrvh","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-39316","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5w4j-mrrh-jjrm","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-39317","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-39317","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-99cm-4gw7-c8jh","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-39318","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-387j-8j96-7q35","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-39319","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mvxm-wfj2-5fvh","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-39320","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-39320","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qfq2-82qr-7f4j","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-39347","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c5xq-8v35-pffg","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41877","tags":["advisory","report"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.8_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2851.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:2851","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230399-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1205512","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-39316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-39317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-39320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-39347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41877","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230400-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-41877","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6522-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6522-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-39352","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-39356","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-41877","title":"Missing input length validation in `drive` channel in FreeRDP","description":"FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in `drive` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the drive redirection channel - command line options `/drive`, `+drives` or `+home-drive`.","status":"published","published":"2022-11-16T00:00:00Z","modified":"2025-11-03T20:35:08.499Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:34:28.374916Z"}],"euvd":[{"id":"EUVD-2022-45039","description":"FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in `drive` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the drive redirection channel - command line options `/drive`, `+drives` or `+home-drive`.","status":"published","published":"2022-11-16T00:00:00Z","modified":"2025-11-03T20:35:08Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T19:49:32.503916Z"}],"nvd":[{"id":"CVE-2022-41877","description":"FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in `drive` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the drive redirection channel - command line options `/drive`, `+drives` or `+home-drive`.","status":"published","published":"2022-11-16T20:15:10.507Z","modified":"2026-06-17T05:03:57.82Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L","level":"medium","assessor":"primary"}],"cwes":["CWE-119","CWE-1284"],"updated_at":"2026-11-02T14:07:32.395456Z"}],"osv":[{"id":"ALPINE-CVE-2022-41877","description":"FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in `drive` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the drive redirection channel - command line options `/drive`, `+drives` or `+home-drive`.","status":"published","published":"2022-11-16T20:15:10.507Z","modified":"2026-11-03T07:30:56.139984728Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T07:50:01.054176Z"},{"id":"CVE-2022-41877","title":"Missing input length validation in `drive` channel in FreeRDP","description":"FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in `drive` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the drive redirection channel - command line options `/drive`, `+drives` or `+home-drive`.","status":"published","published":"2022-11-16T00:00:00Z","modified":"2026-10-28T10:28:31.395277554Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:44:27.186787Z"},{"id":"DEBIAN-CVE-2022-41877","description":"FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in `drive` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the drive redirection channel - command line options `/drive`, `+drives` or `+home-drive`.","status":"published","published":"2022-11-16T20:15:10.507Z","modified":"2026-11-03T08:04:10.38207734Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T08:23:07.763774Z"},{"id":"OESA-2022-2112","title":"freerdp security update","description":"FreeRDP is a client implementation of the Remote Desktop Protocol (RDP) that follows Microsoft's open specifications. This package provides the client applications xfreerdp and wlfreerdp.\r\n\r\nSecurity Fix(es):\r\n\r\nFreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicalization and base path check for `drive` channel. A malicious server can trick a FreeRDP based client to read files outside the shared directory. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/drive`, `/drives` or `+home-drive` redirection switch.(CVE-2022-39347)\r\n\r\nFreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGFX decoder component of FreeRDP. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it likely resulting in a crash. This issue has been addressed in the 2.9.0 release. Users are advised to upgrade.(CVE-2022-39316)\r\n\r\nFreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in the `urbdrc` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/usb` redirection switch.(CVE-2022-39319)\r\n\r\nFreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in `drive` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the drive redirection channel - command line options `/drive`, `+drives` or `+home-drive`.(CVE-2022-41877)\r\n\r\nFreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input validation in `urbdrc` channel. A malicious server can trick a FreeRDP based client to crash with division by zero. This issue has been addressed in version 2.9.0. All users are advised to upgrade. Users unable to upgrade should not use the `/usb` redirection switch.(CVE-2022-39318)","status":"published","published":"2022-11-25T11:05:25Z","modified":"2026-08-18T01:17:26.893902696Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2023:2326","title":"Red Hat Security Advisory: freerdp security update","status":"published","published":"2024-09-16T09:59:34Z","modified":"2026-06-27T10:16:53Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:2851","title":"Red Hat Security Advisory: freerdp security update","status":"published","published":"2024-09-16T09:59:44Z","modified":"2026-06-27T10:17:09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RLSA-2023:2851","title":"Moderate: freerdp security update","description":"FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.\n\nSecurity Fix(es):\n\n* freerdp: clients using `/parallel` command line switch might read uninitialized data (CVE-2022-39282)\n\n* freerdp: clients using the `/video` command line switch might read uninitialized data (CVE-2022-39283)\n\n* freerdp: out of bounds read in zgfx decoder (CVE-2022-39316)\n\n* freerdp: undefined behaviour in zgfx decoder (CVE-2022-39317)\n\n* freerdp: division by zero in urbdrc channel (CVE-2022-39318)\n\n* freerdp: missing length validation in urbdrc channel (CVE-2022-39319)\n\n* freerdp: heap buffer overflow in urbdrc channel (CVE-2022-39320)\n\n* freerdp: missing path sanitation with `drive` channel (CVE-2022-39347)\n\n* freerdp: missing input length validation in `drive` channel (CVE-2022-41877)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.","status":"published","published":"2026-06-25T12:01:05.792943Z","modified":"2026-06-25T12:30:04.275974952Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2022-41877","description":"FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in `drive` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the drive redirection channel - command line options `/drive`, `+drives` or `+home-drive`.","status":"published","published":"2022-11-16T20:15:00Z","modified":"2026-04-22T13:28:06.049695Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L","level":"medium"},{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T16:53:55.502114Z"},{"id":"ALSA-2023:2326","title":"Moderate: freerdp security update","description":"FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.\n\nSecurity Fix(es):\n\n* freerdp: clients using `/parallel` command line switch might read uninitialized data (CVE-2022-39282)\n* freerdp: clients using the `/video` command line switch might read uninitialized data (CVE-2022-39283)\n* freerdp: out of bounds read in zgfx decoder (CVE-2022-39316)\n* freerdp: undefined behaviour in zgfx decoder (CVE-2022-39317)\n* freerdp: division by zero in urbdrc channel (CVE-2022-39318)\n* freerdp: missing length validation in urbdrc channel (CVE-2022-39319)\n* freerdp: heap buffer overflow in urbdrc channel (CVE-2022-39320)\n* freerdp: missing path sanitation with `drive` channel (CVE-2022-39347)\n* freerdp: missing input length validation in `drive` channel (CVE-2022-41877)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-09T00:00:00Z","modified":"2026-10-29T11:30:55.392282272Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:2851","title":"Moderate: freerdp security update","description":"FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.\n\nSecurity Fix(es):\n\n* freerdp: clients using `/parallel` command line switch might read uninitialized data (CVE-2022-39282)\n* freerdp: clients using the `/video` command line switch might read uninitialized data (CVE-2022-39283)\n* freerdp: out of bounds read in zgfx decoder (CVE-2022-39316)\n* freerdp: undefined behaviour in zgfx decoder (CVE-2022-39317)\n* freerdp: division by zero in urbdrc channel (CVE-2022-39318)\n* freerdp: missing length validation in urbdrc channel (CVE-2022-39319)\n* freerdp: heap buffer overflow in urbdrc channel (CVE-2022-39320)\n* freerdp: missing path sanitation with `drive` channel (CVE-2022-39347)\n* freerdp: missing input length validation in `drive` channel (CVE-2022-41877)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-16T00:00:00Z","modified":"2026-10-29T11:02:04.895389052Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"DLA-3654-1","title":"freerdp2 - security update","status":"published","published":"2023-11-17T00:00:00Z","modified":"2026-03-09T01:20:39.038402Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DLA-4053-1","title":"freerdp2 - security update","status":"published","published":"2025-02-15T00:00:00Z","modified":"2026-03-09T01:19:24.57066Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2022-0474","title":"Updated freerdp packages fix security vulnerability","description":"Affected versions of FreeRDP are missing input length validation in\n'drive' channel. A malicious server can trick a FreeRDP based client to\nread out of bound data and send it back to the server. (CVE-2022-41877)\n","status":"published","published":"2022-12-17T18:48:08Z","modified":"2026-04-16T04:40:46.811912864Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"SUSE-SU-2023:0399-1","title":"Security update for freerdp","description":"This update for freerdp fixes the following issues:\n\n- CVE-2022-39316: Fixed out of bound read in zgfx decoder (bsc#1205512).\n- CVE-2022-39317: Fixed undefined behaviour in zgfx decoder (bsc#1205512).\n- CVE-2022-39320: Fixed heap buffer overflow in urbdrc channel (bsc#1205512).\n- CVE-2022-39347: Fixed missing path sanitation with drive channel (bsc#1205512).\n- CVE-2022-41877: Fixed missing input length validation in drive channel (bsc#1205512).\n","status":"published","published":"2023-02-13T15:17:39Z","modified":"2026-02-04T02:29:38.497287Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0400-1","title":"Security update for freerdp","description":"This update for freerdp fixes the following issues:\n\n- CVE-2022-39316: Fixed out of bound read in zgfx decoder (bsc#1205512).\n- CVE-2022-39317: Fixed undefined behaviour in zgfx decoder (bsc#1205512).\n- CVE-2022-39320: Fixed heap buffer overflow in urbdrc channel (bsc#1205512).\n- CVE-2022-39347: Fixed missing path sanitation with drive channel (bsc#1205512).\n- CVE-2022-41877: Fixed missing input length validation in drive channel (bsc#1205512).\n","status":"published","published":"2023-02-13T15:17:53Z","modified":"2026-02-04T04:03:39.410745Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"USN-6522-1","title":"freerdp2 vulnerabilities","description":"It was discovered that FreeRDP incorrectly handled drive redirection. If a\nuser were tricked into connection to a malicious server, a remote attacker\ncould use this issue to cause FreeRDP to crash, resulting in a denial of\nservice, or possibly obtain sensitive information. (CVE-2022-41877)\n\nIt was discovered that FreeRDP incorrectly handled certain surface updates.\nA remote attacker could use this issue to cause FreeRDP to crash, resulting\nin a denial of service, or possibly execute arbitrary code.\n(CVE-2023-39352, CVE-2023-39356)\n","status":"published","published":"2023-11-29T13:34:38Z","modified":"2026-04-22T10:42:37.907363Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6522-2","title":"freerdp2 vulnerabilities","description":"USN-6522-1 fixed several vulnerabilities in FreeRDP. This update provides\nthe corresponding update for Ubuntu 18.04 LTS.\nOriginal advisory details:\n\n It was discovered that FreeRDP incorrectly handled drive redirection. If a\n user were tricked into connection to a malicious server, a remote attacker\n could use this issue to cause FreeRDP to crash, resulting in a denial of\n service, or possibly obtain sensitive information. (CVE-2022-41877)\n \n It was discovered that FreeRDP incorrectly handled certain surface updates.\n A remote attacker could use this issue to cause FreeRDP to crash, resulting\n in a denial of service, or possibly execute arbitrary code.\n (CVE-2023-39352, CVE-2023-39356)\n","status":"published","published":"2023-12-07T11:00:10Z","modified":"2026-04-22T10:42:31.260605Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}