Every CVE Search/ Get API key

CVE-2022-24882

Server side NTLM does not properly check parameters in FreeRDP

9.1 CriticalFix available

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
None

Exploit likelihood

2.85%Up 1.9 points since Apr 27, 2022
90%50%10%1%

What each source reports

CVE List Score used 9.1

Server side NTLM does not properly check parameters in FreeRDP

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.

Record
CVE-2022-24882
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-287
Updated
2026-11-02
EUVDEUVD-2022-29650 9.1

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.

Record
EUVD-2022-29650
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
NVD 9.1

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.

Record
CVE-2022-24882
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-287
Updated
2026-11-02
OSV 9.1

Server side NTLM does not properly check parameters in FreeRDP

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.

Record
CVE-2022-24882
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-287
Updated
2026-11-02
OSVDEBIAN-CVE-2022-24882 7.5

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.

Record
DEBIAN-CVE-2022-24882
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-03
OSVOESA-2022-1657 9.8

freerdp security update

FreeRDP is a client implementation of the Remote Desktop Protocol (RDP) that follows Microsoft's open specifications. This package provides the client applications xfreerdp and wlfreerdp.

Security Fix(es):

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a SAM file might be successful for invalid credentials if the server has configured an invalid SAM file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a SAM file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via HashCallback and/or ensure the SAM database path configured is valid and the application has file handles left.(CVE-2022-24883)

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.(CVE-2022-24882)

Record
OESA-2022-1657
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 7 moreShow less
OSVUBUNTU-CVE-2022-24882 9.1

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.

Record
UBUNTU-CVE-2022-24882
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVMGASA-2022-0383 No score

Updated freerdp packages fix security vulnerability

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds. (CVE-2022-24882)

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a 'SAM' file might be successful for invalid credentials if the server has configured an invalid 'SAM' file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a 'SAM' file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via 'HashCallback' and/or ensure the 'SAM' database path configured is valid and the application has file handles left. (CVE-2022-24883)

Record
MGASA-2022-0383
Updated
2026-11-02
OSVopenSUSE-SU-2024:13504-1 No score

freerdp-2.11.2-3.1 on GA media

These are all security issues fixed in the freerdp-2.11.2-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13504-1
Updated
2026-11-02
OSVSUSE-SU-2022:2352-1 No score

Security update for freerdp

This update for freerdp fixes the following issues:

  • CVE-2022-24882: Fixed incorrect check parameters in NTLM (bsc#1198919).
  • CVE-2022-24883: Fixed authentication against invalid SAM files (bsc#1198921).
Record
SUSE-SU-2022:2352-1
Updated
2026-11-02
OSVSUSE-SU-2022:2353-1 No score

Security update for freerdp

This update for freerdp fixes the following issues:

  • CVE-2022-24882: Fixed incorrect check parameters in NTLM (bsc#1198919).
  • CVE-2022-24883: Fixed authentication against invalid SAM files (bsc#1198921).
Record
SUSE-SU-2022:2353-1
Updated
2026-11-02
OSVSUSE-SU-2022:2354-1 No score

Security update for freerdp

This update for freerdp fixes the following issues:

  • CVE-2022-24882: Fixed incorrect check parameters in NTLM (bsc#1198919).
  • CVE-2022-24883: Fixed authentication against invalid SAM files (bsc#1198921).
Record
SUSE-SU-2022:2354-1
Updated
2026-11-02
OSVUSN-5461-1 No score

freerdp2 vulnerabilities

It was discovered that FreeRDP incorrectly handled empty password values. A remote attacker could use this issue to bypass server authentication. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 21.10. (CVE-2022-24882)

It was discovered that FreeRDP incorrectly handled server configurations with an invalid SAM file path. A remote attacker could use this issue to bypass server authentication. (CVE-2022-24883)

Record
USN-5461-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
freerdp2
Debian:12
 before 2.7.0+dfsg1-1
2.7.0+dfsg1-1
freerdp2
Debian:11
From an advisory covering 2 CVEs
 before 2.3.0+dfsg1-2+deb11u3, plus listed versions
2.3.0+dfsg1-22.3.0+dfsg1-2+deb11u12.3.0+dfsg1-2+deb11u2
2.3.0+dfsg1-2+deb11u3
freerdp
Mageia:8
From an advisory covering 2 CVEs
 before 2.2.0-1.2.mga8
2.2.0-1.2.mga8
freerdp
openEuler:20.03-LTS-SP1
From an advisory covering 2 CVEs
 before 2.7.0-1.oe1
2.7.0-1.oe1
freerdp
openEuler:20.03-LTS-SP3
From an advisory covering 2 CVEs
 before 2.7.0-1.oe1
2.7.0-1.oe1
freerdp
openEuler:22.03-LTS
From an advisory covering 2 CVEs
 before 2.7.0-1.oe2203
2.7.0-1.oe2203
freerdp
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 2 CVEs
 before 2.1.2-12.23.1
2.1.2-12.23.1
freerdp
SUSE:Linux Enterprise Workstation Extension 12 SP5
From an advisory covering 2 CVEs
 before 2.1.2-12.23.1
2.1.2-12.23.1
freerdp
SUSE:Linux Enterprise Module for Package Hub 15 SP3
From an advisory covering 2 CVEs
 before 2.1.2-150200.15.15.1
2.1.2-150200.15.15.1
freerdp
SUSE:Linux Enterprise Workstation Extension 15 SP3
From an advisory covering 2 CVEs
 before 2.1.2-150200.15.15.1
2.1.2-150200.15.15.1
Show 13 moreShow less
Affected packages
PackageAffectedFixed
freerdp
openSUSE:Leap 15.3
From an advisory covering 2 CVEs
 before 2.1.2-150200.15.15.1
2.1.2-150200.15.15.1
freerdp
SUSE:Linux Enterprise Module for Package Hub 15 SP4
From an advisory covering 2 CVEs
 before 2.4.0-150400.3.3.1
2.4.0-150400.3.3.1
freerdp
SUSE:Linux Enterprise Workstation Extension 15 SP4
From an advisory covering 2 CVEs
 before 2.4.0-150400.3.3.1
2.4.0-150400.3.3.1
freerdp
openSUSE:Leap 15.4
From an advisory covering 2 CVEs
 before 2.4.0-150400.3.3.1
2.4.0-150400.3.3.1
freerdp
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.1.0~git20140921.1.440916e+dfsg1-5ubuntu11.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.21.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.31.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4
 None known
freerdp2
Ubuntu:18.04:LTS
 before 2.2.0+dfsg1-0ubuntu0.18.04.3, plus listed versions
2.0.0~git20170725.1.1648deb+dfsg1-12.0.0~git20170725.1.1648deb+dfsg1-52.0.0~git20170725.1.1648deb+dfsg1-5ubuntu12.0.0~git20170725.1.1648deb+dfsg1-5ubuntu22.0.0~git20170725.1.1648deb+dfsg1-6
Show 6 moreShow less
2.0.0~git20170725.1.1648deb+dfsg1-6build12.0.0~git20170725.1.1648deb+dfsg1-72.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.12.1.1+dfsg1-0ubuntu0.18.04.12.2.0+dfsg1-0ubuntu0.18.04.12.2.0+dfsg1-0ubuntu0.18.04.2
2.2.0+dfsg1-0ubuntu0.18.04.3
freerdp
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.1.0~git20140921.1.440916e+dfsg1-15ubuntu11.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.11.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2
 None known
freerdp2
Ubuntu:20.04:LTS
 before 2.2.0+dfsg1-0ubuntu0.20.04.3, plus listed versions
2.0.0~git20190204.1.2693389a+dfsg1-12.0.0~git20190204.1.2693389a+dfsg1-22.0.0~git20190204.1.2693389a+dfsg1-2build12.0.0~git20190204.1.2693389a+dfsg1-2build22.1.1+dfsg1-0ubuntu0.20.04.12.2.0+dfsg1-0ubuntu0.20.04.12.2.0+dfsg1-0ubuntu0.20.04.2
2.2.0+dfsg1-0ubuntu0.20.04.3
freerdp2
Ubuntu:22.04:LTS
 before 2.6.1+dfsg1-3ubuntu1, plus listed versions
2.3.0+dfsg1-2build12.3.0+dfsg1-2ubuntu12.3.0+dfsg1-2ubuntu22.4.1+dfsg1-12.4.1+dfsg1-1ubuntu1
Show 5 moreShow less
2.4.1+dfsg1-1ubuntu22.5.0+dfsg1-12.6.0+dfsg1-12.6.1+dfsg1-12.6.1+dfsg1-3
2.6.1+dfsg1-3ubuntu1
freerdp2
Ubuntu:18.04:LTS
From an advisory covering 2 CVEs
 before 2.2.0+dfsg1-0ubuntu0.18.04.3, plus listed versions
2.0.0~git20170725.1.1648deb+dfsg1-12.0.0~git20170725.1.1648deb+dfsg1-52.0.0~git20170725.1.1648deb+dfsg1-5ubuntu12.0.0~git20170725.1.1648deb+dfsg1-5ubuntu22.0.0~git20170725.1.1648deb+dfsg1-6
Show 6 moreShow less
2.0.0~git20170725.1.1648deb+dfsg1-6build12.0.0~git20170725.1.1648deb+dfsg1-72.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.12.1.1+dfsg1-0ubuntu0.18.04.12.2.0+dfsg1-0ubuntu0.18.04.12.2.0+dfsg1-0ubuntu0.18.04.2
2.2.0+dfsg1-0ubuntu0.18.04.3
freerdp2
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
 before 2.2.0+dfsg1-0ubuntu0.20.04.3, plus listed versions
2.0.0~git20190204.1.2693389a+dfsg1-12.0.0~git20190204.1.2693389a+dfsg1-22.0.0~git20190204.1.2693389a+dfsg1-2build12.0.0~git20190204.1.2693389a+dfsg1-2build22.1.1+dfsg1-0ubuntu0.20.04.12.2.0+dfsg1-0ubuntu0.20.04.12.2.0+dfsg1-0ubuntu0.20.04.2
2.2.0+dfsg1-0ubuntu0.20.04.3
freerdp2
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 2.6.1+dfsg1-3ubuntu2.1, plus listed versions
2.3.0+dfsg1-2build12.3.0+dfsg1-2ubuntu12.3.0+dfsg1-2ubuntu22.4.1+dfsg1-12.4.1+dfsg1-1ubuntu1
Show 7 moreShow less
2.4.1+dfsg1-1ubuntu22.5.0+dfsg1-12.6.0+dfsg1-12.6.1+dfsg1-12.6.1+dfsg1-32.6.1+dfsg1-3ubuntu12.6.1+dfsg1-3ubuntu2
2.6.1+dfsg1-3ubuntu2.1
freerdp2
openSUSE:Tumbleweed
From an advisory covering 14 CVEs
 before 2.11.2-3.1
2.11.2-3.1

History

History
RecordedChangedSources
affected, factsOSV
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-24882 is a critical vulnerability (CVSS 9.1) in Freerdp, published April 26, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.85%, the 86th percentile. Fixed in freerdp2 2.7.0+dfsg1-1.

References

Show 35 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open