Log in Start free

Vulnerability · Published Apr 26, 2022 · Assigned by GitHub_M

CVE-2022-24882Server side NTLM does not properly check parameters in FreeRDP

Critical 9.1

In plain English

A critical-severity improper authentication in FreeRDP from FreeRDP. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.8% (higher than 87% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)2.8%top 13.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12freerdp22.7.0+dfsg1-1DEBIAN-CVE-2022-24882
Ubuntu:22.04:LTSfreerdp22.6.1+dfsg1-3ubuntu2.1USN-5461-1
Ubuntu:22.04:LTSfreerdp22.6.1+dfsg1-3ubuntu1UBUNTU-CVE-2022-24882

Affected products (as reported)

VendorProductVersions
FreeRDP FreeRDP < 2.7.0

Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References