CVE-2022-24882
published 2022-04-26CVE-2022-24882: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort…
PriorityP350high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
2.75%
84.6th percentile
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | freerdp2 | < freerdp2 2.7.0+dfsg1-1 (bookworm) | freerdp2 2.7.0+dfsg1-1 (bookworm) |
| fedoraproject | extra_packages_for_enterprise_linux | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| freerdp | freerdp | < 2.7.0 | 2.7.0 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv7.5HIGH
vendor_debian9.1CRITICAL
vendor_redhat9.1CRITICAL
vendor_ubuntu9.1CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
freerdp2 vulnerabilities
osv·2022-06-06·CVSS 7.5
CVE-2022-24882 [HIGH] freerdp2 vulnerabilities
freerdp2 vulnerabilities
It was discovered that FreeRDP incorrectly handled empty password values. A
remote attacker could use this issue to bypass server authentication. This
issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 21.10.
(CVE-2022-24882)
It was discovered that FreeRDP incorrectly handled server configurations
with an invalid SAM file path. A remote attacker could use this issue to
bypass server authentication. (CVE-2022-24883)
OSV
CVE-2022-24882: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP)
osv·2022-04-26·CVSS 7.5
CVE-2022-24882 [HIGH] CVE-2022-24882: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP)
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.
Ubuntu
FreeRDP vulnerabilities
vendor_ubuntu·2022-06-06·CVSS 9.1
CVE-2022-24883 [CRITICAL] FreeRDP vulnerabilities
Title: FreeRDP vulnerabilities
Summary: FreeRDP could allow unintended access to network services.
It was discovered that FreeRDP incorrectly handled empty password values. A
remote attacker could use this issue to bypass server authentication. This
issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 21.10.
(CVE-2022-24882)
It was discovered that FreeRDP incorrectly handled server configurations
with an invalid SAM file path. A remote attacker could use this issue to
bypass server authentication. (CVE-2022-24883)
Instructions: After a standard system update you need to reboot your computer to make all
the necessary changes.
Red Hat
freerdp: Server side NTLM does not properly check parameters
vendor_redhat·2022-04-22·CVSS 9.1
CVE-2022-24882 [CRITICAL] CWE-287 freerdp: Server side NTLM does not properly check parameters
freerdp: Server side NTLM does not properly check parameters
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.
A vulnerability was found in freerdp. The flaw occurs because the NT LAN Manager (NTLM) authentication does not properly abort when someone provides an empty password value. This issue exposes an improper authenticating vulnerability.
Statement: The CVE is just for server functionality, but the server support is completely disabled in RHEL. So RH
Debian
CVE-2022-24882: freerdp2 - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versio...
vendor_debian·2022·CVSS 9.1
CVE-2022-24882 [CRITICAL] CVE-2022-24882: freerdp2 - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versio...
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.
Scope: local
bookworm: resolved (fixed in 2.7.0+dfsg1-1)
bullseye: resolved (fixed in 2.3.0+dfsg1-2+deb11u3)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/FreeRDP/FreeRDP/pull/7750https://github.com/FreeRDP/FreeRDP/releases/tag/2.7.0https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6x5p-gp49-3jhhhttps://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/issues/95https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AELSWWBAM2YONRPGLWVDY6UNTLJERJYL/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DOYKBQOHSRM7JQYUIYUWFOXI2JZ2J5RD/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZWR6KSIKXO4B2TXBB3WH6YTNYHN46OY/https://security.gentoo.org/glsa/202210-24https://github.com/FreeRDP/FreeRDP/pull/7750https://github.com/FreeRDP/FreeRDP/releases/tag/2.7.0https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6x5p-gp49-3jhhhttps://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/issues/95https://lists.debian.org/debian-lts-announce/2025/02/msg00034.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AELSWWBAM2YONRPGLWVDY6UNTLJERJYL/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DOYKBQOHSRM7JQYUIYUWFOXI2JZ2J5RD/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZWR6KSIKXO4B2TXBB3WH6YTNYHN46OY/https://security.gentoo.org/glsa/202210-24
2022-04-26
Published