{"schemaVersion":3,"id":"USN-5461-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"freerdp2 vulnerabilities\n\nIt was discovered that FreeRDP incorrectly handled empty password values. A\nremote attacker could use this issue to bypass server authentication. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 21.10.\n(CVE-2022-24882)\n\nIt was discovered that FreeRDP incorrectly handled server configurations\nwith an invalid SAM file path. A remote attacker could use this issue to\nbypass server authentication. (CVE-2022-24883)","dates":{"published":"2022-06-06T16:33:28.000Z","modified":"2026-04-27T16:10:26.560Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"freerdp2","name":"freerdp2","label":"freerdp2","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/freerdp2","purlType":"deb","versions":[{"text":"< 2.2.0+dfsg1-0ubuntu0.18.04.3","noFixRecorded":false,"fixedIn":null},{"text":"< 2.2.0+dfsg1-0ubuntu0.20.04.3","noFixRecorded":false,"fixedIn":null},{"text":"< 2.6.1+dfsg1-3ubuntu2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0+dfsg1-0ubuntu0.18.04.3 | < 2.2.0+dfsg1-0ubuntu0.20.04.3 | < 2.6.1+dfsg1-3ubuntu2.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-5461-1","label":"ubuntu.com/security/notices/USN-5461-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-24882","label":"ubuntu.com/security/CVE-2022-24882","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-24883","label":"ubuntu.com/security/CVE-2022-24883","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2022-24882","CVE-2022-24883"],"downstream":[],"duplicates":[],"related":["CVE-2022-24882","CVE-2022-24883"]},"timeline":[{"kind":"published","date":"2022-06-06T16:33:28.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-27T16:10:26.560Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T05:43:38.009Z","stale":false,"partial":false}}