CVE-2020-11042 log
Source |
|
Severity | High |
Remote | Yes |
Type | Information disclosure |
Description | An out-of-bounds read issue has been found in FreeRDP before 2.0.0, allowing an attacker to read a defined amount of client memory (32bit unsigned -> 4GB) to an intermediate buffer. Can be used to crash the client or store information for later retrieval. |
Group | Package | Affected | Fixed | Severity | Status | Ticket |
---|---|---|---|---|---|---|
AVG-1131 | freerdp | 1:2.0.0_rc4-8 | 2:2.0.0-1 | Critical | Fixed |
References |
---|
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9jp6-5vf2-cx2q https://github.com/FreeRDP/FreeRDP/commit/6b2bc41935e53b0034fe5948aeeab4f32e80f30f |