Cyber Resilience

CVE-2022-39282

Low

Published: 12 October 2022

Published
12 October 2022
Modified
03 November 2025
KEV Added
—
Patch
—
CVSS Score v3.1 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
EPSS Score 0.0029 53.2th percentile
Risk Priority 7 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2022-39282 is a low-severity Use of Uninitialized Resource (CWE-908) vulnerability in Fedoraproject Fedora. Its CVSS base score is 3.5 (Low).

Operationally, ranked in the top 46.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using `/parallel` command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server…

more

implementations are not affected. Please upgrade to 2.8.1 where this issue is patched. If unable to upgrade, do not use parallel port redirection (`/parallel` command line switch) as a workaround.

CWE(s)
CWE-908

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

freerdp
freerdp
≤ 2.8.1
fedoraproject
fedora
35, 36, 37

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References