Published: 15/05/2020 Updated: 30/07/2022

CVSS v2 Base Score: 6 | Impact Score: 6.4 | Exploitability Score: 6.8

CVSS v3 Base Score: 6.6 | Impact Score: 5.9 | Exploitability Score: 0.7

VMScore: 534

Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P

libfreerdp/gdi/region.c in FreeRDP versions > 1.0 up to and including 2.0.0-rc4 has an Integer Overflow.

Vulnerable Product	Search on Vulmon	Subscribe to Product
freerdp freerdp 2.0.0
freerdp freerdp
debian debian linux 9.0
canonical ubuntu linux 18.04
opensuse leap 15.1
canonical ubuntu linux 19.10
canonical ubuntu linux 20.04
canonical ubuntu linux 16.04

Several security issues were fixed in FreeRDP ...

Synopsis Important: freerdp security update Type/Severity Security Advisory: Important Topic An update for freerdp is now available for Red Hat Enterprise Linux 81 Extended Update SupportRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring ...

Synopsis Important: freerdp security update Type/Severity Security Advisory: Important Topic An update for freerdp is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, ...

Synopsis Important: freerdp security update Type/Severity Security Advisory: Important Topic An update for freerdp is now available for Red Hat Enterprise Linux 80 Update Services for SAP SolutionsRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerabili ...

Synopsis Important: freerdp security update Type/Severity Security Advisory: Important Topic An update for freerdp is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, ...

Severity Unknown Remote Unknown Type Unknown Description AVG-1131 freerdp 1:200_rc4-8 2:200-1 Critical Fixed githubcom/FreeRDP/FreeRDP/commit/ce21b9d7ecd967e0bc98ed31a6b3757848aa6c9e ...

CWE-190 https://github.com/FreeRDP/FreeRDP/commits/master https://pub.freerdp.com/cve/CVE-2020-11523/pocAnalysis_2.pdf https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4qrh-8cp8-4x42 https://usn.ubuntu.com/4379-1/https://usn.ubuntu.com/4382-1/http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html https://lists.debian.org/debian-lts-announce/2020/08/msg00054.html https://nvd.nist.gov https://usn.ubuntu.com/4379-1/

CVE-2020-11523

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect