Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.6
CVE-2022-39320: Heap buffer overflow in urbdrc channel
CVE-2022-39320 · published 3 years ago
Summary
FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition on too narrow types leads to allocation of a buffer too small holding the data written. A malicious server can trick a FreeRDP based client to read out of bound data and send it b...
What to do
- Update debian freerdp2 to version 2.9.0+dfsg1-1.
- Update freerdp freerdp to version 2.9.0 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | freerdp | freerdp |
< 2.9.0 cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:* |
| – | fedoraproject | fedora |
36 37 cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* |
| Debian:12 | debian | freerdp2 |
< 2.9.0+dfsg1-1 Fix: upgrade to 2.9.0+dfsg1-1
|
Original advisory text
Heap buffer overflow in urbdrc channel
FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition on too narrow types leads to allocation of a buffer too small holding the data written. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/usb` redirection switch.
References
- https://lists.debian.org/debian-lts-announce/2025/02/msg00034.html URL
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qfq2-82qr-7f4j Vendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39320... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-39320 Vendor Advisory
- https://security.gentoo.org/glsa/202401-16 Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2022-39320 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-125Out-of-bounds Read
Timeline
Published16 Nov 2022
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2022-39320 · NVD
CVE-2022-39320 · OSV
GHSA-qfq2-82qr-7f4j · GHSA
DEBIAN-CVE-2022-39320 · OSV
Track software like this
Free during beta