https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 09:53:00 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-06851 bdu:2022-06851 https://cve.radiocsirt.org/vuln/bdu:2022-06851 https://cve.radiocsirt.org/vuln/euvd-2026-258047 EUVD-2026-258047 https://cve.radiocsirt.org/vuln/euvd-2026-258047 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24883 <p>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a `SAM` file might be successful for invalid credentials if the server has configured an invalid `SAM` file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a `SAM` file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via `HashCallback` and/or ensure the `SAM` database path configured is valid and the application has file handles left.</p> <p>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a `SAM` file might be successful for invalid credentials if the server has configured an invalid `SAM` file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a `SAM` file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via `HashCallback` and/or ensure the `SAM` database path configured is valid and the application has file handles left.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-24883 https://cve.radiocsirt.org/vuln/gsd-2022-24883 gsd-2022-24883 https://cve.radiocsirt.org/vuln/gsd-2022-24883 https://cve.radiocsirt.org/vuln/oesa-2022-1657 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: freerdp, openEuler:20.03-LTS-SP3: freerdp, openEuler:22.03-LTS: freerdp</p> <p>FreeRDP is a client implementation of the Remote Desktop Protocol (RDP) that follows Microsoft&#39;s open specifications. This package provides the client applications xfreerdp and wlfreerdp.</p> <p>Security Fix(es):</p> <p>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a `SAM` file might be successful for invalid credentials if the server has configured an invalid `SAM` file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a `SAM` file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via `HashCallback` and/or ensure the `SAM` database path configured is valid and the application has file handles left.(CVE-2022-24883)</p> <p>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.(CVE-2022-24882)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: freerdp, openEuler:20.03-LTS-SP3: freerdp, openEuler:22.03-LTS: freerdp</p> <p>FreeRDP is a client implementation of the Remote Desktop Protocol (RDP) that follows Microsoft&#39;s open specifications. This package provides the client applications xfreerdp and wlfreerdp.</p> <p>Security Fix(es):</p> <p>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a `SAM` file might be successful for invalid credentials if the server has configured an invalid `SAM` file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a `SAM` file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via `HashCallback` and/or ensure the `SAM` database path configured is valid and the application has file handles left.(CVE-2022-24883)</p> <p>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.(CVE-2022-24882)</p> https://cve.radiocsirt.org/vuln/oesa-2022-1657 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13504-1 <p>freerdp-2.11.2-3.1 on GA media</p> <p>freerdp-2.11.2-3.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13504-1 https://cve.radiocsirt.org/vuln/suse-su-2022:2352-1 <p>Security update for freerdp</p> <p>Security update for freerdp</p> https://cve.radiocsirt.org/vuln/suse-su-2022:2352-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-24883 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: freerdp, Ubuntu:18.04:LTS: freerdp2, Ubuntu:18.04:LTS: freerdp, Ubuntu:20.04:LTS: freerdp2, Ubuntu:22.04:LTS: freerdp2</p> <p>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a `SAM` file might be successful for invalid credentials if the server has configured an invalid `SAM` file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a `SAM` file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via `HashCallback` and/or ensure the `SAM` database path configured is valid and the application has file handles left.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: freerdp, Ubuntu:18.04:LTS: freerdp2, Ubuntu:18.04:LTS: freerdp, Ubuntu:20.04:LTS: freerdp2, Ubuntu:22.04:LTS: freerdp2</p> <p>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a `SAM` file might be successful for invalid credentials if the server has configured an invalid `SAM` file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a `SAM` file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via `HashCallback` and/or ensure the `SAM` database path configured is valid and the application has file handles left.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-24883