Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 19:11:58 +0000 CVE-2022-24882 — Server side NTLM does not properly check parameters in FreeRDP https://vulnerability.circl.lu/vuln/cve-2022-24882 <p><strong>Affected:</strong> FreeRDP</p> <p>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.</p> <p><strong>Affected:</strong> FreeRDP</p> <p>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.</p> https://vulnerability.circl.lu/vuln/cve-2022-24882 USN-5461-1 — freerdp2 vulnerabilities https://vulnerability.circl.lu/vuln/usn-5461-1 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: freerdp2, Ubuntu:20.04:LTS: freerdp2, Ubuntu:22.04:LTS: freerdp2</p> <p>It was discovered that FreeRDP incorrectly handled empty password values. A remote attacker could use this issue to bypass server authentication. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 21.10. (CVE-2022-24882)</p> <p>It was discovered that FreeRDP incorrectly handled server configurations with an invalid SAM file path. A remote attacker could use this issue to bypass server authentication. (CVE-2022-24883)</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: freerdp2, Ubuntu:20.04:LTS: freerdp2, Ubuntu:22.04:LTS: freerdp2</p> <p>It was discovered that FreeRDP incorrectly handled empty password values. A remote attacker could use this issue to bypass server authentication. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 21.10. (CVE-2022-24882)</p> <p>It was discovered that FreeRDP incorrectly handled server configurations with an invalid SAM file path. A remote attacker could use this issue to bypass server authentication. (CVE-2022-24883)</p> https://vulnerability.circl.lu/vuln/usn-5461-1