Lucene search

K
redhatcveRedhat.comRH:CVE-2020-11039
HistoryJun 17, 2020 - 2:56 p.m.

CVE-2020-11039

2020-06-1714:56:14
redhat.com
access.redhat.com
9

0.002 Low

EPSS

Percentile

54.9%

In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled (nearly) arbitrary memory can be read and written due to integer overflows in length checks. This has been patched in 2.1.0.

Mitigation

To mitigate this flaw, do not enable USB redirection in the client config.