Lucene search
PRIOn knowledge basePRION:CVE-2020-11048HistoryMay 07, 2020 - 8:15 p.m.
Out-of-bounds
2020-05-0720:15:00
PRIOn knowledge base
www.prio-n.com
5
In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bounds read. It only allows to abort a session. No data extraction is possible. This has been fixed in 2.0.0.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 19.10 | |
| ubuntu_linux | eq | 20.04 | |
| ubuntu_linux | eq | 16.04 | |
| ubuntu_linux | eq | 18.04 | |
| debian_linux | eq | 9.0 | |
| debian_linux | eq | 10.0 | |
| freerdp | ge | 1.0.0 | |
| freerdp | lt | 2.0.0 |
References
github.com/FreeRDP/FreeRDP/commit/9301bfe730c66180263248b74353daa99f5a969b
github.com/FreeRDP/FreeRDP/issues/6007
github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hv8w-f2hx-5gcv
lists.debian.org/debian-lts-announce/2020/08/msg00054.html
lists.debian.org/debian-lts-announce/2023/10/msg00008.html
usn.ubuntu.com/4379-1/
usn.ubuntu.com/4382-1/
Related
redhatcve
redhatcve
CVE-2020-11048
2020-05-14 13:25:32
veracode
veracode
Denial Of Service (DoS)
2020-10-01 03:56:25
cve
cve
CVE-2020-11048
2020-05-07 20:15:12
cvelist
cvelist
CVE-2020-11048 Out-of-bounds Read in FreeRDPrdp_read_flow_control_pdu
2020-05-07 00:00:00
osv
osv
CVE-2020-11048
2020-05-07 20:15:12
freerdp vulnerabilities
2020-11-26 18:47:18
freerdp - security update
2020-08-30 00:00:00
debiancve
debiancve
CVE-2020-11048
2020-05-07 20:15:12
ubuntucve
ubuntucve
CVE-2020-11048
2020-05-07 00:00:00
CVE-2020-11049
2020-05-07 00:00:00
nvd
nvd
CVE-2020-11048
2020-05-07 20:15:12
openvas
openvas
FreeRDP > 1.0.0 & < 2.0.0 Multiple Out-of-Bounds Vulnerabilities
2020-05-13 00:00:00
Ubuntu: Security Advisory (USN-4382-2)
2022-08-26 00:00:00
Ubuntu: Security Advisory (USN-4382-1)
2020-06-05 00:00:00
ubuntu
ubuntu
FreeRDP vulnerabilities
2020-11-26 00:00:00
FreeRDP vulnerabilities
2020-06-04 00:00:00
FreeRDP vulnerabilities
2020-06-01 00:00:00
nessus
nessus
Ubuntu 18.04 LTS : FreeRDP vulnerabilities (USN-4382-2)
2020-11-26 00:00:00
Debian DLA-2356-1 : freerdp security update
2020-08-31 00:00:00
Ubuntu 16.04 LTS : FreeRDP vulnerabilities (USN-4382-1)
2020-06-05 00:00:00
debian
debian
[SECURITY] [DLA 2356-1] freerdp security update
2020-08-29 23:51:52
[SECURITY] [DLA 3606-1] freerdp2 security update
2023-10-07 18:09:17
oraclelinux
oraclelinux
freerdp security, bug fix, and enhancement update
2020-10-06 00:00:00
freerdp and vinagre security, bug fix, and enhancement update
2020-11-10 00:00:00
rocky
rocky
freerdp and vinagre security, bug fix, and enhancement update
2020-11-03 12:23:37
amazon
amazon
Medium: freerdp
2020-10-22 17:36:00
redhat
redhat
almalinux
almalinux
Moderate: freerdp and vinagre security, bug fix, and enhancement update
2020-11-03 12:23:37
centos
centos
freerdp, libwinpr security update
2020-10-20 18:03:15
mageia
mageia
Updated freerdp/remmina packages fix security vulnerability
2020-08-01 02:25:42