Published: 29/05/2020 Updated: 24/10/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 3.5 | Impact Score: 1.4 | Exploitability Score: 2.1

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

In FreeRDP prior to 2.1.0, there is an out-of-bounds read in cliprdr_read_format_list. Clipboard format data read (by client or server) might read data out-of-bounds. This has been fixed in 2.1.0.

Vulnerable Product	Search on Vulmon	Subscribe to Product
freerdp freerdp
opensuse leap 15.1
debian debian linux 10.0

Synopsis Moderate: freerdp and vinagre security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for freerdp and vinagre is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Moderate A Common ...

In FreeRDP less than or equal to 200, a possible resource exhaustion vulnerability can be performed Malicious clients could trigger out of bound reads causing memory allocation with random size This has been fixed in 210 (CVE-2020-11018) In FreeRDP less than or equal to 200, when running with logger set to "WLOG_TRACE", a possible crash of ...

CWE-125 https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2j4w-v45m-95hf https://github.com/FreeRDP/FreeRDP/commit/b73143cf7ee5fe4cdabcbf56908aa15d8a883821 http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html https://access.redhat.com/errata/RHSA-2020:4647 https://nvd.nist.gov https://alas.aws.amazon.com/AL2/ALAS-2020-1516.html

CVE-2020-11085

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect