CVE-2020-11099

 

Published at: - 23-06-2020 12:15

Last modified: - 02-09-2022 05:45

Total changes: - 2

Description

In FreeRDP before version 2.1.2, there is an out of bounds read in license_read_new_or_upgrade_license_packet. A manipulated license packet can lead to out of bound reads to an internal buffer. This is fixed in version 2.1.2.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

 

Verification logic

 

Reference

• https://github.com/FreeRDP/FreeRDP/commit/6ade7b4cbfd71c54b3d724e8f2d6ac76a58e879a
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-977w-866x-4v5h
• http://www.freerdp.com/2020/06/22/2_1_2-released
• openSUSE-SU-2020:1090-Third Party Advisory
• FEDORA-2020-8d5f86e29a-Mailing List, Third Party Advisory
• FEDORA-2020-a3432485db-Mailing List, Third Party Advisory
• USN-4481-1-Third Party Advisory

 

Keywords

NVD

 

CVE-2020-11099

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures