CVE-2022-24882

Published: Apr 26, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.

Affected (5)

Products: Freerdp: Freerdp · Fedoraproject: Extra Packages For Enterprise Linux, Fedora

1 product

2 products

Extra Packages For Enterprise Linux

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Freerdp Freerdp	Before 2.7.0

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Extra Packages For Enterprise Linux	Version 8.0
Fedoraproject Fedora	Version 34
Fedoraproject Fedora	Version 35
Fedoraproject Fedora	Version 36

Related CWEs

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (17)

https://github.com/FreeRDP/FreeRDP/pull/7750

Source: security-advisories@github.com

PatchThird Party Advisory

https://github.com/FreeRDP/FreeRDP/releases/tag/2.7.0

Source: security-advisories@github.com

Release NotesThird Party Advisory

https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6x5p-gp49-3jhh

Source: security-advisories@github.com

Third Party Advisory

https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/issues/95

Source: security-advisories@github.com

ExploitIssue TrackingThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AELSWWBAM2YONRPGLWVDY6UNTLJERJYL/

Source: security-advisories@github.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DOYKBQOHSRM7JQYUIYUWFOXI2JZ2J5RD/

Source: security-advisories@github.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZWR6KSIKXO4B2TXBB3WH6YTNYHN46OY/

Source: security-advisories@github.com

https://security.gentoo.org/glsa/202210-24

Source: security-advisories@github.com

Third Party Advisory

https://github.com/FreeRDP/FreeRDP/pull/7750

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://github.com/FreeRDP/FreeRDP/releases/tag/2.7.0

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6x5p-gp49-3jhh

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/issues/95

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingThird Party Advisory

https://lists.debian.org/debian-lts-announce/2025/02/msg00034.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AELSWWBAM2YONRPGLWVDY6UNTLJERJYL/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DOYKBQOHSRM7JQYUIYUWFOXI2JZ2J5RD/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZWR6KSIKXO4B2TXBB3WH6YTNYHN46OY/

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/202210-24

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.