CVE-2022-39320

CVE-2022-39320 affects FreeRDP and relates to a heap buffer overflow in the urbdrc channel caused by integer addition on too-narrow types, leading to writing data into a too-small allocation. Exploitation could enable reading out-of-bound data and echoing it back to the server. The vulnerability ...

CVE-2022-39318 Division by zero in urbdrc channel in FreeRDP

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input validation in urbdrc channel. A malicious server can trick a FreeRDP based client to crash with division by zero. This issue has been addressed in version 2.9.0. All users are advised to...

CVE-2022-39317 Out of bounds read in zgfx decoder in FreeRDP

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing a range check for input offset index in ZGFX decoder. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it. This issue has been addressed in versio...

CVE-2022-39320

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition on too narrow types leads to allocation of a buffer too small holding the data written. A malicious server can trick a FreeRDP based client to read out of bound data and send i...

CVE-2022-39316

FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGFX decoder component of FreeRDP. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it likely resulting in a crash. This issue has be...

CVE-2022-39318 Division by zero in urbdrc channel in FreeRDP

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input validation in urbdrc channel. A malicious server can trick a FreeRDP based client to crash with division by zero. This issue has been addressed in version 2.9.0. All users are advised to...

CVE-2022-39317

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing a range check for input offset index in ZGFX decoder. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it. This issue has been addressed in versio...

CVE-2022-39319

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in the urbdrc channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in...

CVE-2022-39317

FreeRDP (ZGFX decoder) is affected by CVE-2022-39317: a missing range check on the input offset index in the ZGFX decoder can allow a malicious server to cause an out-of-bounds read and attempted decoding. This is addressed in FreeRDP version 2.9.0 and later. Affected products are FreeRDP librari...

CVE-2022-39347

CVE-2022-39347 affects FreeRDP: vulnerable in affected FreeRDP clients due to missing path canonicalization and base path checks on the drive channel, allowing a malicious server to trick a client into reading files outside the shared directory. The issue has been addressed in version 2.9.0; user...

CVE-2022-39316 Out of bound read in FreeRDP

FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGFX decoder component of FreeRDP. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it likely resulting in a crash. This issue has be...

CVE-2022-41877

CVE-2022-41877 affects FreeRDP where the drive channel lacks input length validation, allowing a malicious server to trick a client into reading out-of-bounds data and returning it. The issue is confirmed across multiple connected sources (e.g., Astra Linux advisory and Debian/AlmaLinux advisorie...

CVE-2022-41877 Missing input length validation in `drive` channel in FreeRDP

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in drive channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version...

CVE-2022-39317 Out of bounds read in zgfx decoder in FreeRDP

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing a range check for input offset index in ZGFX decoder. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it. This issue has been addressed in versio...

CVE-2022-39318

FreeRDP’s CVE-2022-39318 affects the urbdrc channel where missing input validation can cause a client crash via division by zero when processing server data. The issue is addressed in version 2.9.0; upgrading is recommended. If upgrading is not possible, avoid using the USB redirection in affecte...

CVE-2022-39347 Missing path sanitation with `drive` channel in FreeRDP

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicalization and base path check for drive channel. A malicious server can trick a FreeRDP based client to read files outside the shared directory. This issue has been addressed in...

CVE-2022-39316

CVE-2022-39316 describes an out-of-bounds read in FreeRDP’s ZGFX decoder. Multiple connected advisories confirm the issue affects FreeRDP clients and note the root cause as an out-of-bounds read in ZGFX decoding, leading to potential crashes when processing data from a malicious server. The publi...

CVE-2022-39320 Heap buffer overflow in urbdrc channel

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition on too narrow types leads to allocation of a buffer too small holding the data written. A malicious server can trick a FreeRDP based client to read out of bound data and send i...

CVE-2022-41877 Missing input length validation in `drive` channel in FreeRDP

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in drive channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version...

CVE-2022-39319

CVE-2022-39319 affects FreeRDP: missing input length validation in the urbdrc channel can allow a malicious server to read out-of-bounds data and echo it back. Impact is data exposure via the channel; exploitation requires a vulnerable FreeRDP client, typically over a network. Remediation: upgrad...