UBUNTU-CVE-2022-24883

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2022-24883

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24883.json

JSON Data

https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2022-24883

Related

Published

2022-04-26T16:15:00Z

Modified

2025-06-02T17:16:16Z

Severity

7.4 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a SAM file might be successful for invalid credentials if the server has configured an invalid SAM file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a SAM file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via HashCallback and/or ensure the SAM database path configured is valid and the application has file handles left.

References

Affected packages

Ubuntu:Pro:16.04:LTS / freerdp

Package

Name: freerdp
Purl: pkg:deb/ubuntu/freerdp@1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4?arch=source&distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1

1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2

1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.3

1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4

Ecosystem specific

{
    "ubuntu_priority": "low"
}

Ubuntu:18.04:LTS / freerdp2

Package

Name: freerdp2
Purl: pkg:deb/ubuntu/freerdp2@2.2.0+dfsg1-0ubuntu0.18.04.3?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.2.0+dfsg1-0ubuntu0.18.04.3

Affected versions

2.*

2.0.0~git20170725.1.1648deb+dfsg1-1

2.0.0~git20170725.1.1648deb+dfsg1-5

2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu1

2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu2

2.0.0~git20170725.1.1648deb+dfsg1-6

2.0.0~git20170725.1.1648deb+dfsg1-6build1

2.0.0~git20170725.1.1648deb+dfsg1-7

2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1

2.1.1+dfsg1-0ubuntu0.18.04.1

2.2.0+dfsg1-0ubuntu0.18.04.1

2.2.0+dfsg1-0ubuntu0.18.04.2

Ecosystem specific

{
    "ubuntu_priority": "low",
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "freerdp2-dev",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "freerdp2-shadow-x11",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "freerdp2-shadow-x11-dbgsym",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "freerdp2-wayland",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "freerdp2-wayland-dbgsym",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "freerdp2-x11",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "freerdp2-x11-dbgsym",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "libfreerdp-client2-2",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "libfreerdp-client2-2-dbgsym",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "libfreerdp-server2-2",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "libfreerdp-server2-2-dbgsym",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "libfreerdp-shadow-subsystem2-2",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "libfreerdp-shadow-subsystem2-2-dbgsym",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "libfreerdp-shadow2-2",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "libfreerdp-shadow2-2-dbgsym",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "libfreerdp2-2",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "libfreerdp2-2-dbgsym",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "libuwac0-0",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "libuwac0-0-dbgsym",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "libuwac0-dev",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "libwinpr-tools2-2",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "libwinpr-tools2-2-dbgsym",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "libwinpr2-2",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "libwinpr2-2-dbgsym",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "libwinpr2-dev",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "winpr-utils",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        },
        {
            "binary_name": "winpr-utils-dbgsym",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.3"
        }
    ]
}

Ubuntu:Pro:18.04:LTS / freerdp

Package

Name: freerdp
Purl: pkg:deb/ubuntu/freerdp@1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2?arch=source&distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1

1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1

1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2

Ecosystem specific

{
    "ubuntu_priority": "low"
}

Ubuntu:20.04:LTS / freerdp2

Package

Name: freerdp2
Purl: pkg:deb/ubuntu/freerdp2@2.2.0+dfsg1-0ubuntu0.20.04.3?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.2.0+dfsg1-0ubuntu0.20.04.3

Affected versions

2.*

2.0.0~git20190204.1.2693389a+dfsg1-1

2.0.0~git20190204.1.2693389a+dfsg1-2

2.0.0~git20190204.1.2693389a+dfsg1-2build1

2.0.0~git20190204.1.2693389a+dfsg1-2build2

2.1.1+dfsg1-0ubuntu0.20.04.1

2.2.0+dfsg1-0ubuntu0.20.04.1

2.2.0+dfsg1-0ubuntu0.20.04.2

Ecosystem specific

{
    "ubuntu_priority": "low",
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "freerdp2-dev",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "freerdp2-shadow-x11",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "freerdp2-wayland",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "freerdp2-x11",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "libfreerdp-client2-2",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "libfreerdp-server2-2",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "libfreerdp-shadow-subsystem2-2",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "libfreerdp-shadow2-2",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "libfreerdp2-2",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "libuwac0-0",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "libuwac0-dev",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "libwinpr-tools2-2",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "libwinpr2-2",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "libwinpr2-dev",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "winpr-utils",
            "binary_version": "2.2.0+dfsg1-0ubuntu0.20.04.3"
        }
    ]
}

Ubuntu:22.04:LTS / freerdp2

Package

Name: freerdp2
Purl: pkg:deb/ubuntu/freerdp2@2.6.1+dfsg1-3ubuntu2.1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.6.1+dfsg1-3ubuntu2.1

Affected versions

2.*

2.3.0+dfsg1-2build1

2.3.0+dfsg1-2ubuntu1

2.3.0+dfsg1-2ubuntu2

2.4.1+dfsg1-1

2.4.1+dfsg1-1ubuntu1

2.4.1+dfsg1-1ubuntu2

2.5.0+dfsg1-1

2.6.0+dfsg1-1

2.6.1+dfsg1-1

2.6.1+dfsg1-3

2.6.1+dfsg1-3ubuntu1

2.6.1+dfsg1-3ubuntu2

Ecosystem specific

{
    "ubuntu_priority": "low",
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "freerdp2-dev",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "freerdp2-shadow-x11",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "freerdp2-shadow-x11-dbgsym",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "freerdp2-wayland",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "freerdp2-wayland-dbgsym",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "freerdp2-x11",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "freerdp2-x11-dbgsym",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "libfreerdp-client2-2",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "libfreerdp-client2-2-dbgsym",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "libfreerdp-server2-2",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "libfreerdp-server2-2-dbgsym",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "libfreerdp-shadow-subsystem2-2",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "libfreerdp-shadow-subsystem2-2-dbgsym",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "libfreerdp-shadow2-2",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "libfreerdp-shadow2-2-dbgsym",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "libfreerdp2-2",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "libfreerdp2-2-dbgsym",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "libuwac0-0",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "libuwac0-0-dbgsym",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "libuwac0-dev",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "libwinpr-tools2-2",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "libwinpr-tools2-2-dbgsym",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "libwinpr2-2",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "libwinpr2-2-dbgsym",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "libwinpr2-dev",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "winpr-utils",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        },
        {
            "binary_name": "winpr-utils-dbgsym",
            "binary_version": "2.6.1+dfsg1-3ubuntu2.1"
        }
    ]
}