Lucene search
PRIOn knowledge basePRION:CVE-2020-11049HistoryMay 07, 2020 - 8:15 p.m.
Out-of-bounds
2020-05-0720:15:00
PRIOn knowledge base
www.prio-n.com
3
In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bound read of client memory that is then passed on to the protocol parser. This has been patched in 2.0.0.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 19.10 | |
| ubuntu_linux | eq | 20.04 | |
| ubuntu_linux | eq | 16.04 | |
| ubuntu_linux | eq | 18.04 | |
| debian_linux | eq | 10.0 | |
| freerdp | gt | 1.1.0 | |
| freerdp | lt | 2.0.0 |
References
github.com/FreeRDP/FreeRDP/commit/c367f65d42e0d2e1ca248998175180aa9c2eacd0
github.com/FreeRDP/FreeRDP/issues/6008
github.com/FreeRDP/FreeRDP/pull/6019
github.com/FreeRDP/FreeRDP/security/advisories/GHSA-wwh7-r2r8-xjpr
lists.debian.org/debian-lts-announce/2023/10/msg00008.html
usn.ubuntu.com/4379-1/
usn.ubuntu.com/4382-1/
Related
cve
cve
CVE-2020-11049
2020-05-07 20:15:12
osv
osv
CVE-2020-11049
2020-05-07 20:15:12
Moderate: freerdp and vinagre security, bug fix, and enhancement update
2020-11-03 12:23:37
Moderate: freerdp and vinagre security, bug fix, and enhancement update
2020-11-03 12:23:37
veracode
veracode
Denial Of Service (DoS)
2020-10-01 03:56:25
cvelist
cvelist
CVE-2020-11049 Out-of-bounds Read in FreeRDPrdp_read_share_control_header
2020-05-07 00:00:00
debiancve
debiancve
CVE-2020-11049
2020-05-07 20:15:12
nvd
nvd
CVE-2020-11049
2020-05-07 20:15:12
redhatcve
redhatcve
CVE-2020-11049
2020-05-14 14:03:47
ubuntucve
ubuntucve
CVE-2020-11049
2020-05-07 00:00:00
openvas
openvas
FreeRDP > 1.1.0 & < 2.0.0 Multiple Out-of-Bounds Read Vulnerabilities
2020-05-13 00:00:00
Ubuntu: Security Advisory (USN-4382-1)
2020-06-05 00:00:00
Ubuntu: Security Advisory (USN-4379-1)
2020-06-02 00:00:00
ubuntu
ubuntu
FreeRDP vulnerabilities
2020-06-04 00:00:00
FreeRDP vulnerabilities
2020-06-01 00:00:00
nessus
nessus
Ubuntu 16.04 LTS : FreeRDP vulnerabilities (USN-4382-1)
2020-06-05 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : FreeRDP vulnerabilities (USN-4379-1)
2020-06-02 00:00:00
CentOS 7 : freerdp (CESA-2020:4031)
2020-10-20 00:00:00
almalinux
almalinux
Moderate: freerdp and vinagre security, bug fix, and enhancement update
2020-11-03 12:23:37
oraclelinux
oraclelinux
freerdp security, bug fix, and enhancement update
2020-10-06 00:00:00
freerdp and vinagre security, bug fix, and enhancement update
2020-11-10 00:00:00
redhat
redhat
centos
centos
freerdp, libwinpr security update
2020-10-20 18:03:15
rocky
rocky
freerdp and vinagre security, bug fix, and enhancement update
2020-11-03 12:23:37
amazon
amazon
Medium: freerdp
2020-10-22 17:36:00
mageia
mageia
Updated freerdp/remmina packages fix security vulnerability
2020-08-01 02:25:42
debian
debian
[SECURITY] [DLA 3606-1] freerdp2 security update
2023-10-07 18:09:17