Every CVE Search/ Get API key

CVE-2022-24883

FreeRDP Server authentication might allow invalid credentials to pass

7.4 HighFix available

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a SAM file might be successful for invalid credentials if the server has configured an invalid SAM file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a SAM file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via HashCallback and/or ensure the SAM database path configured is valid and the application has file handles left.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
None

Exploit likelihood

2.34%Up 1.4 points since Apr 27, 2022
90%50%10%1%

What each source reports

CVE List Score used 7.4

FreeRDP Server authentication might allow invalid credentials to pass

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a SAM file might be successful for invalid credentials if the server has configured an invalid SAM file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a SAM file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via HashCallback and/or ensure the SAM database path configured is valid and the application has file handles left.

Record
CVE-2022-24883
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-287
Updated
2026-11-02
EUVDEUVD-2022-29651 7.4

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a SAM file might be successful for invalid credentials if the server has configured an invalid SAM file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a SAM file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via HashCallback and/or ensure the SAM database path configured is valid and the application has file handles left.

Record
EUVD-2022-29651
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
NVD 7.4

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a SAM file might be successful for invalid credentials if the server has configured an invalid SAM file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a SAM file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via HashCallback and/or ensure the SAM database path configured is valid and the application has file handles left.

Record
CVE-2022-24883
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-287
Updated
2026-11-02
OSV 7.4

FreeRDP Server authentication might allow invalid credentials to pass

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a SAM file might be successful for invalid credentials if the server has configured an invalid SAM file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a SAM file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via HashCallback and/or ensure the SAM database path configured is valid and the application has file handles left.

Record
CVE-2022-24883
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-287
Updated
2026-11-02
OSVDEBIAN-CVE-2022-24883 9.8

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a SAM file might be successful for invalid credentials if the server has configured an invalid SAM file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a SAM file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via HashCallback and/or ensure the SAM database path configured is valid and the application has file handles left.

Record
DEBIAN-CVE-2022-24883
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVOESA-2022-1657 9.8

freerdp security update

FreeRDP is a client implementation of the Remote Desktop Protocol (RDP) that follows Microsoft's open specifications. This package provides the client applications xfreerdp and wlfreerdp.

Security Fix(es):

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a SAM file might be successful for invalid credentials if the server has configured an invalid SAM file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a SAM file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via HashCallback and/or ensure the SAM database path configured is valid and the application has file handles left.(CVE-2022-24883)

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.(CVE-2022-24882)

Record
OESA-2022-1657
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 8 moreShow less
OSVUBUNTU-CVE-2022-24883 7.4

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a SAM file might be successful for invalid credentials if the server has configured an invalid SAM file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a SAM file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via HashCallback and/or ensure the SAM database path configured is valid and the application has file handles left.

Record
UBUNTU-CVE-2022-24883
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVCLSA-2026-1778146905 No score

freerdp: Fix of CVE-2022-24883

  • Reuse centos7els branch for oraclelinux7els
  • CVE-2022-24883: fix server-side NTLM auth bypass against a SAM database by rejecting auth when SamOpen fails or the user entry is missing
Record
CLSA-2026-1778146905
Updated
2026-11-02
OSVMGASA-2022-0383 No score

Updated freerdp packages fix security vulnerability

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds. (CVE-2022-24882)

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a 'SAM' file might be successful for invalid credentials if the server has configured an invalid 'SAM' file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a 'SAM' file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via 'HashCallback' and/or ensure the 'SAM' database path configured is valid and the application has file handles left. (CVE-2022-24883)

Record
MGASA-2022-0383
Updated
2026-11-02
OSVopenSUSE-SU-2024:13504-1 No score

freerdp-2.11.2-3.1 on GA media

These are all security issues fixed in the freerdp-2.11.2-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13504-1
Updated
2026-11-02
OSVSUSE-SU-2022:2352-1 No score

Security update for freerdp

This update for freerdp fixes the following issues:

  • CVE-2022-24882: Fixed incorrect check parameters in NTLM (bsc#1198919).
  • CVE-2022-24883: Fixed authentication against invalid SAM files (bsc#1198921).
Record
SUSE-SU-2022:2352-1
Updated
2026-11-02
OSVSUSE-SU-2022:2353-1 No score

Security update for freerdp

This update for freerdp fixes the following issues:

  • CVE-2022-24882: Fixed incorrect check parameters in NTLM (bsc#1198919).
  • CVE-2022-24883: Fixed authentication against invalid SAM files (bsc#1198921).
Record
SUSE-SU-2022:2353-1
Updated
2026-11-02
OSVSUSE-SU-2022:2354-1 No score

Security update for freerdp

This update for freerdp fixes the following issues:

  • CVE-2022-24882: Fixed incorrect check parameters in NTLM (bsc#1198919).
  • CVE-2022-24883: Fixed authentication against invalid SAM files (bsc#1198921).
Record
SUSE-SU-2022:2354-1
Updated
2026-11-02
OSVUSN-5461-1 No score

freerdp2 vulnerabilities

It was discovered that FreeRDP incorrectly handled empty password values. A remote attacker could use this issue to bypass server authentication. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 21.10. (CVE-2022-24882)

It was discovered that FreeRDP incorrectly handled server configurations with an invalid SAM file path. A remote attacker could use this issue to bypass server authentication. (CVE-2022-24883)

Record
USN-5461-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
freerdp
TuxCare:OracleLinux:7
 before 2.1.1-5.el7_9.tuxcare.els21
2.1.1-5.el7_9.tuxcare.els21
freerdp-devel
TuxCare:OracleLinux:7
 before 2.1.1-5.el7_9.tuxcare.els21
2.1.1-5.el7_9.tuxcare.els21
freerdp-libs
TuxCare:OracleLinux:7
 before 2.1.1-5.el7_9.tuxcare.els21
2.1.1-5.el7_9.tuxcare.els21
libwinpr
TuxCare:OracleLinux:7
 before 2.1.1-5.el7_9.tuxcare.els21
2.1.1-5.el7_9.tuxcare.els21
libwinpr-devel
TuxCare:OracleLinux:7
 before 2.1.1-5.el7_9.tuxcare.els21
2.1.1-5.el7_9.tuxcare.els21
freerdp2
Debian:12
 before 2.7.0+dfsg1-1
2.7.0+dfsg1-1
freerdp2
Debian:10
From an advisory covering 9 CVEs
 before 2.3.0+dfsg1-2+deb10u4, plus listed versions
2.0.0~git20190204.1.2693389a+dfsg1-12.0.0~git20190204.1.2693389a+dfsg1-1+deb10u12.0.0~git20190204.1.2693389a+dfsg1-1+deb10u22.0.0~git20190204.1.2693389a+dfsg1-22.0.0~git20190204.1.2693389a+dfsg1-2~bpo10+1
Show 9 moreShow less
2.1.1+dfsg1-12.1.2+dfsg1-12.1.2+dfsg1-22.2.0+dfsg1-12.2.0+dfsg1-1~bpo10+12.3.0+dfsg1-12.3.0+dfsg1-1~bpo10+12.3.0+dfsg1-22.3.0+dfsg1-2+deb10u3
2.3.0+dfsg1-2+deb10u4
freerdp2
Debian:11
From an advisory covering 32 CVEs
 before 2.3.0+dfsg1-2+deb11u2, plus listed versions
2.3.0+dfsg1-22.3.0+dfsg1-2+deb11u1
2.3.0+dfsg1-2+deb11u2
freerdp
Mageia:8
From an advisory covering 2 CVEs
 before 2.2.0-1.2.mga8
2.2.0-1.2.mga8
freerdp
openEuler:20.03-LTS-SP1
From an advisory covering 2 CVEs
 before 2.7.0-1.oe1
2.7.0-1.oe1
Show 19 moreShow less
Affected packages
PackageAffectedFixed
freerdp
openEuler:20.03-LTS-SP3
From an advisory covering 2 CVEs
 before 2.7.0-1.oe1
2.7.0-1.oe1
freerdp
openEuler:22.03-LTS
From an advisory covering 2 CVEs
 before 2.7.0-1.oe2203
2.7.0-1.oe2203
freerdp
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 2 CVEs
 before 2.1.2-12.23.1
2.1.2-12.23.1
freerdp
SUSE:Linux Enterprise Workstation Extension 12 SP5
From an advisory covering 2 CVEs
 before 2.1.2-12.23.1
2.1.2-12.23.1
freerdp
SUSE:Linux Enterprise Module for Package Hub 15 SP3
From an advisory covering 2 CVEs
 before 2.1.2-150200.15.15.1
2.1.2-150200.15.15.1
freerdp
SUSE:Linux Enterprise Workstation Extension 15 SP3
From an advisory covering 2 CVEs
 before 2.1.2-150200.15.15.1
2.1.2-150200.15.15.1
freerdp
openSUSE:Leap 15.3
From an advisory covering 2 CVEs
 before 2.1.2-150200.15.15.1
2.1.2-150200.15.15.1
freerdp
SUSE:Linux Enterprise Module for Package Hub 15 SP4
From an advisory covering 2 CVEs
 before 2.4.0-150400.3.3.1
2.4.0-150400.3.3.1
freerdp
SUSE:Linux Enterprise Workstation Extension 15 SP4
From an advisory covering 2 CVEs
 before 2.4.0-150400.3.3.1
2.4.0-150400.3.3.1
freerdp
openSUSE:Leap 15.4
From an advisory covering 2 CVEs
 before 2.4.0-150400.3.3.1
2.4.0-150400.3.3.1
freerdp
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.1.0~git20140921.1.440916e+dfsg1-5ubuntu11.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.21.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.31.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4
 None known
freerdp2
Ubuntu:18.04:LTS
 before 2.2.0+dfsg1-0ubuntu0.18.04.3, plus listed versions
2.0.0~git20170725.1.1648deb+dfsg1-12.0.0~git20170725.1.1648deb+dfsg1-52.0.0~git20170725.1.1648deb+dfsg1-5ubuntu12.0.0~git20170725.1.1648deb+dfsg1-5ubuntu22.0.0~git20170725.1.1648deb+dfsg1-6
Show 6 moreShow less
2.0.0~git20170725.1.1648deb+dfsg1-6build12.0.0~git20170725.1.1648deb+dfsg1-72.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.12.1.1+dfsg1-0ubuntu0.18.04.12.2.0+dfsg1-0ubuntu0.18.04.12.2.0+dfsg1-0ubuntu0.18.04.2
2.2.0+dfsg1-0ubuntu0.18.04.3
freerdp
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.1.0~git20140921.1.440916e+dfsg1-15ubuntu11.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.11.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2
 None known
freerdp2
Ubuntu:20.04:LTS
 before 2.2.0+dfsg1-0ubuntu0.20.04.3, plus listed versions
2.0.0~git20190204.1.2693389a+dfsg1-12.0.0~git20190204.1.2693389a+dfsg1-22.0.0~git20190204.1.2693389a+dfsg1-2build12.0.0~git20190204.1.2693389a+dfsg1-2build22.1.1+dfsg1-0ubuntu0.20.04.12.2.0+dfsg1-0ubuntu0.20.04.12.2.0+dfsg1-0ubuntu0.20.04.2
2.2.0+dfsg1-0ubuntu0.20.04.3
freerdp2
Ubuntu:22.04:LTS
 before 2.6.1+dfsg1-3ubuntu2.1, plus listed versions
2.3.0+dfsg1-2build12.3.0+dfsg1-2ubuntu12.3.0+dfsg1-2ubuntu22.4.1+dfsg1-12.4.1+dfsg1-1ubuntu1
Show 7 moreShow less
2.4.1+dfsg1-1ubuntu22.5.0+dfsg1-12.6.0+dfsg1-12.6.1+dfsg1-12.6.1+dfsg1-32.6.1+dfsg1-3ubuntu12.6.1+dfsg1-3ubuntu2
2.6.1+dfsg1-3ubuntu2.1
freerdp2
Ubuntu:18.04:LTS
From an advisory covering 2 CVEs
 before 2.2.0+dfsg1-0ubuntu0.18.04.3, plus listed versions
2.0.0~git20170725.1.1648deb+dfsg1-12.0.0~git20170725.1.1648deb+dfsg1-52.0.0~git20170725.1.1648deb+dfsg1-5ubuntu12.0.0~git20170725.1.1648deb+dfsg1-5ubuntu22.0.0~git20170725.1.1648deb+dfsg1-6
Show 6 moreShow less
2.0.0~git20170725.1.1648deb+dfsg1-6build12.0.0~git20170725.1.1648deb+dfsg1-72.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.12.1.1+dfsg1-0ubuntu0.18.04.12.2.0+dfsg1-0ubuntu0.18.04.12.2.0+dfsg1-0ubuntu0.18.04.2
2.2.0+dfsg1-0ubuntu0.18.04.3
freerdp2
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
 before 2.2.0+dfsg1-0ubuntu0.20.04.3, plus listed versions
2.0.0~git20190204.1.2693389a+dfsg1-12.0.0~git20190204.1.2693389a+dfsg1-22.0.0~git20190204.1.2693389a+dfsg1-2build12.0.0~git20190204.1.2693389a+dfsg1-2build22.1.1+dfsg1-0ubuntu0.20.04.12.2.0+dfsg1-0ubuntu0.20.04.12.2.0+dfsg1-0ubuntu0.20.04.2
2.2.0+dfsg1-0ubuntu0.20.04.3
freerdp2
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 2.6.1+dfsg1-3ubuntu2.1, plus listed versions
2.3.0+dfsg1-2build12.3.0+dfsg1-2ubuntu12.3.0+dfsg1-2ubuntu22.4.1+dfsg1-12.4.1+dfsg1-1ubuntu1
Show 7 moreShow less
2.4.1+dfsg1-1ubuntu22.5.0+dfsg1-12.6.0+dfsg1-12.6.1+dfsg1-12.6.1+dfsg1-32.6.1+dfsg1-3ubuntu12.6.1+dfsg1-3ubuntu2
2.6.1+dfsg1-3ubuntu2.1
freerdp2
openSUSE:Tumbleweed
From an advisory covering 14 CVEs
 before 2.11.2-3.1
2.11.2-3.1

History

History
RecordedChangedSources
affected, factsOSV
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-24883 is a high vulnerability (CVSS 7.4) in Freerdp, published April 26, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.34%, the 83rd percentile. Fixed in freerdp 2.1.1-5.el7_9.tuxcare.els21.

References

Show 37 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open