PT-2020-3475 · Freerdp+8 · Freerdp+8

Published

2020-04-09

·

Updated

2024-06-15

·

CVE-2020-11526

CVSS v2.0

3.5

Low

VectorAV:N/AC:M/Au:S/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions FreeRDP versions > 1.1 through 2.0.0-rc4
Description The issue is caused by an integer overflow in the update recv order function of the FreeRDP RDP client. This can allow a remote attacker to gain unauthorized access to protected information. The vulnerability involves an out-of-bounds read in the libfreerdp/core/update.c file.
Recommendations For FreeRDP versions > 1.1 through 2.0.0-rc4, consider disabling the update recv order function as a temporary workaround until a patch is available. Restrict access to the libfreerdp/core/update.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Out of bounds Read

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2020:4647
ALT-PU-2020-1941
ALT-PU-2020-1960
BDU:2020-03799
BDU:2020-03800
CESA-2020_4031
CESA-2020_4647
CVE-2020-11526
DLA-2356-1
ELSA-2020-4031
ELSA-2020-4647
GHSA-97JW-M5W5-XVF9
MGASA-2020-0297
OESA-2021-1008
OPENSUSE-SU-2020:1090-1
OPENSUSE-SU-2020_1090-1
OPENSUSE-SU-2024:10768-1
RHSA-2020:4031
RHSA-2020:4647
RHSA-2020_4031
RHSA-2020_4647
RLSA-2020:4647
RLSA-2020_4647
SUSE-SU-2020:2032-1
SUSE-SU-2020:2068-1
SUSE-SU-2020:2272-1
USN-4379-1
USN-4382-1
USN-4382-2

Affected Products

Alt Linux
Almalinux
Centos
Freerdp
Linuxmint
Red Hat
Rocky Linux
Suse
Ubuntu