Lucene search

[email protected]CVE-2020-11041

HistoryMay 29, 2020 - 7:15 p.m.

CVE-2020-11041

2020-05-2919:15:10

CWE-129

[email protected]

web.nvd.nist.gov

159

cve-2020-11041

freerdp

sound backend

configuration

alsa

oss

pulse

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS3

2.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

AI Score

Confidence

Low

EPSS

0.001

Percentile

51.1%

JSON

In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend (alsa, oss, pulse, …). The most likely outcome is a crash of the client instance followed by no or distorted sound or a session disconnect. If a user cannot upgrade to the patched version, a workaround is to disable sound for the session. This has been patched in 2.1.0.

Affected configurations

Vulners

NVD

Node

freerdpfreerdpRange≤2.0.0

VendorProductVersionCPE
freerdpfreerdp*cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
freerdp	freerdp	*	cpe:2.3:a:freerdp:freerdp::::::::

CNA Affected

[
  {
    "vendor": "FreeRDP",
    "product": "FreeRDP",
    "versions": [
      {
        "version": "<= 2.0.0",
        "status": "affected"
      }
    ]
  }
]