CVE-2020-4032 log

Source	CVE Red Hat MITRE NVD Debian Ubuntu SUSE Alpine Mageia CVE Details CIRCL Bugs Arch Linux Red Hat Gentoo SUSE GitHub Lists oss-security full-disclosure bugtraq Misc GitHub code web search
Severity	Low
Remote	Yes
Type	Information disclosure
Description	An integer casting vulnerability leading to an out-of-bounds read has been found in FreeRDP before 2.1.2, in update_recv_secondary_order(), on clients with +glyph-cache or /relax-order-checks options enabled.

Group	Package	Affected	Fixed	Severity	Status	Ticket
AVG-1193	freerdp	2:2.1.1-1	2:2.1.2-1	High	Fixed

Date	Advisory	Group	Package	Severity	Type
28 Jun 2020	ASA-202006-15	AVG-1193	freerdp	High	multiple issues

References
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3898-mc89-x2vc https://github.com/FreeRDP/FreeRDP/commit/e7bffa64ef5ed70bac94f823e2b95262642f5296