PT-2020-12543 · Freerdp+6 · Freerdp+6
Lowbmiklautz
·
Published
2020-05-10
·
Updated
2023-10-20
·
CVE-2020-11086
CVSS v2.0
5.5
Medium
| Vector | AV:N/AC:L/Au:S/C:P/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
FreeRDP versions prior to 2.1.0
Description
The issue is related to an out-of-bound read in the
ntlm read ntlm v2 client challenge function, which reads up to 28 bytes out-of-bound to an internal structure.Recommendations
For versions prior to 2.1.0, update to version 2.1.0 to resolve the issue.
As a temporary workaround, consider restricting access to the
ntlm read ntlm v2 client challenge function until a patch is available.Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Centos
Freerdp
Red Hat
Rocky Linux
Suse