PT-2022-3902 · Freerdp+7 · Freerdp+7

Akallabeth · Published 2022-04-25 · Updated 2025-02-27 · CVE-2022-24882

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.7.0

Description The issue is related to the implementation of the NTLM protocol in the FreeRDP RDP client, which is associated with shortcomings in the authentication procedure. This can allow a remote attacker to disclose protected information when an empty password value is provided. The vulnerability affects FreeRDP-based RDP Server implementations, but RDP clients are not affected.

Recommendations For versions prior to 2.7.0, update to FreeRDP 2.7.0 to resolve the issue. As a temporary workaround, consider restricting access to the NTLM authentication mechanism until a patch is available.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

ALT-PU-2022-1764

ALT-PU-2022-1774

ALT-PU-2022-2881

ALT-PU-2022-3288

BDU:2022-04713

CVE-2022-24882

DLA-4070-1

GHSA-6X5P-GP49-3JHH

MGASA-2022-0383

OESA-2022-1657

OPENSUSE-SU-2022_2353-1

OPENSUSE-SU-2022_2354-1

OPENSUSE-SU-2024:13504-1

SUSE-SU-2022:2352-1

SUSE-SU-2022:2353-1

SUSE-SU-2022:2354-1

SUSE-SU-2022_2352-1

SUSE-SU-2022_2353-1

SUSE-SU-2022_2354-1

USN-5461-1

Affected Products

Alt Linux

Astra Linux

Debian

Freerdp

Linuxmint

Red Os

Suse

Ubuntu

References · 68

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24882.json · Exploit
• 🔥 https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/issues/95 · Exploit
• https://github.com/FreeRDP/FreeRDP/pull/7750 · Patch
• https://advisories.mageia.org/MGASA-2022-0383.html · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AELSWWBAM2YONRPGLWVDY6UNTLJERJYL · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5461-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4070-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DOYKBQOHSRM7JQYUIYUWFOXI2JZ2J5RD · Vendor Advisory
• https://security.gentoo.org/glsa/202210-24 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/PZWR6KSIKXO4B2TXBB3WH6YTNYHN46OY · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-1121SE47 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5461-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20231214SE16 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/AELSWWBAM2YONRPGLWVDY6UNTLJERJYL · Vendor Advisory