PT-2020-12509 · Freerdp+7 · Freerdp+7

Bmiklautz · Published 2016-04-08 · Updated 2023-10-24 · CVE-2020-11048

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions FreeRDP versions 1.0 through 1.9

Description The issue is an out-of-bounds read that can only be used to abort a session, with no possibility of data extraction.

Recommendations For FreeRDP versions 1.0 through 1.9, update to version 2.0.0 to resolve the issue.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2020:4647

ALT-PU-2016-1308

CESA-2020_4031

CESA-2020_4647

CVE-2020-11048

DLA-2356-1

DLA-3606-1

GHSA-HV8W-F2HX-5GCV

MGASA-2020-0297

RHSA-2020:4031

RHSA-2020:4647

RHSA-2020_4031

RHSA-2020_4647

RLSA-2020:4647

USN-4379-1

USN-4382-1

USN-4382-2

Affected Products

Alt Linux

Almalinux

Centos

Freerdp

Linuxmint

Red Hat

Rocky Linux

Ubuntu

References · 142

• 🔥 https://github.com/FreeRDP/FreeRDP/issues/6007 · Exploit
• https://github.com/FreeRDP/FreeRDP/commit/9301bfe730c66180263248b74353daa99f5a969b · Patch
• https://ubuntu.com/security/CVE-2018-1000852 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-11522 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2020-4647.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-11047 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2020-0297.html · Security Note
• https://ubuntu.com/security/CVE-2020-11042 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-11044 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-11524 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-11048 · Security Note
• https://ubuntu.com/security/CVE-2020-13397 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/IGSY4CEBOH6TVJLIW53YL7YDGHY3RMPU · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2020-0297 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2356-1 · Vendor Advisory