Published: 29/05/2020 Updated: 20/10/2023

CVSS v2 Base Score: 6 | Impact Score: 6.4 | Exploitability Score: 6.8

CVSS v3 Base Score: 5.5 | Impact Score: 3.4 | Exploitability Score: 2.1

VMScore: 534

Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P

In FreeRDP prior to 2.1.0, there is an out-of-bound read in irp functions (parallel_process_irp_create, serial_process_irp_create, drive_process_irp_write, printer_process_irp_write, rdpei_recv_pdu, serial_process_irp_write). This has been fixed in 2.1.0.

Vulnerable Product	Search on Vulmon	Subscribe to Product
freerdp freerdp
opensuse leap 15.1
debian debian linux 10.0

Synopsis Moderate: freerdp and vinagre security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for freerdp and vinagre is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Moderate A Common ...

In FreeRDP less than or equal to 200, a possible resource exhaustion vulnerability can be performed Malicious clients could trigger out of bound reads causing memory allocation with random size This has been fixed in 210 (CVE-2020-11018) In FreeRDP less than or equal to 200, when running with logger set to "WLOG_TRACE", a possible crash of ...

CWE-125 https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hfc7-c5gv-8c2h https://github.com/FreeRDP/FreeRDP/commit/795842f4096501fcefc1a7f535ccc8132feb31d7 https://github.com/FreeRDP/FreeRDP/commit/6b485b146a1b9d6ce72dfd7b5f36456c166e7a16 http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html https://access.redhat.com/errata/RHSA-2020:4647 https://nvd.nist.gov https://alas.aws.amazon.com/AL2/ALAS-2020-1516.html

CVE-2020-11089

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect