CVE-2020-11098

 

Published at: - 23-06-2020 12:15

Last modified: - 19-07-2022 01:36

Total changes: - 2

Description

In FreeRDP before version 2.1.2, there is an out-of-bound read in glyph_cache_put. This affects all FreeRDP clients with `+glyph-cache` option enabled This is fixed in version 2.1.2.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

 

Verification logic

 

Reference

• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jr57-f58x-hjmv
• https://github.com/FreeRDP/FreeRDP/commit/c0fd449ec0870b050d350d6d844b1ea6dad4bc7d
• http://www.freerdp.com/2020/06/22/2_1_2-released
• openSUSE-SU-2020:1090-Third Party Advisory
• FEDORA-2020-8d5f86e29a-Mailing List, Third Party Advisory
• FEDORA-2020-a3432485db-Mailing List, Third Party Advisory
• USN-4481-1-Third Party Advisory

 

Keywords

NVD

 

CVE-2020-11098

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures