CVE-2022-39282

概要

参考情報

• FreeRDP/FreeRDP release 2.8.1 · Release Notes
• FreeRDP/FreeRDP security advisory · Third Party Advisory
• lists.debian.org/debian-lts-announce/2023/11/msg00010.html
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HEWWYMGWIMD4RDCOGHWMZXUMBGZHC5NW
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RLZCF7YHNC5BECDPEJNAZUYGNNM7NFME
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UDOTAOJBCZKREZJPT6VZ25GESI5T6RBG
• security.gentoo.org/glsa/202210-24 · Issue Tracking
• lists.debian.org/debian-lts-announce/2025/02/msg00016.html

freerdp のその他の脆弱性

• CVE-2026-121412中 6.5FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource consumption vulnerability in the proxy that lets connected clients retain…
• CVE-2026-121411低 3.1FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUTPUT PDUs, allowing m…
• CVE-2026-121410中 4.3FreeRDP before 3.32.2 contains a denial of service vulnerability in the RDPGFX ALPHA WIRETOSURFACE_2 handler that fails to validate zero sur…
• CVE-2026-121409中 5.9FreeRDP before 3.32.2 contains a denial of service vulnerability that allows malicious servers or unauthenticated peers to abort clients or …
• CVE-2026-121408中 5.3FreeRDP before 3.32.2 contains a use-after-free in the urbdrc USB redirection channel because FindChannelById returns a channel pointer with…