Lucene search
GoogleOSV:CVE-2020-11042HistoryMay 07, 2020 - 7:15 p.m.
CVE-2020-11042
2020-05-0719:15:11
Google
osv.dev
4
In FreeRDP greater than 1.1 and before 2.0.0, there is an out-of-bounds read in update_read_icon_info. It allows reading a attacker-defined amount of client memory (32bit unsigned -> 4GB) to an intermediate buffer. This can be used to crash the client or store information for later retrieval. This has been patched in 2.0.0.
References
github.com/FreeRDP/FreeRDP/commit/6b2bc41935e53b0034fe5948aeeab4f32e80f30f
github.com/FreeRDP/FreeRDP/issues/6010
github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9jp6-5vf2-cx2q
lists.debian.org/debian-lts-announce/2020/08/msg00054.html
lists.debian.org/debian-lts-announce/2023/10/msg00008.html
usn.ubuntu.com/4379-1/
usn.ubuntu.com/4382-1/
Related
redhatcve
redhatcve
CVE-2020-11042
2020-05-13 17:41:14
nvd
nvd
CVE-2020-11042
2020-05-07 19:15:11
cvelist
cvelist
CVE-2020-11042 Out-of-bounds Read in FreeRDP
2020-05-07 00:00:00
ubuntucve
ubuntucve
CVE-2020-11042
2020-05-07 00:00:00
debiancve
debiancve
CVE-2020-11042
2020-05-07 19:15:11
cve
cve
CVE-2020-11042
2020-05-07 19:15:11
prion
prion
Out-of-bounds
2020-05-07 19:15:00
veracode
veracode
Out-of-bound Reads
2020-05-08 04:37:30
nessus
nessus
EulerOS 2.0 SP5 : freerdp (EulerOS-SA-2021-1675)
2021-03-24 00:00:00
EulerOS 2.0 SP2 : freerdp (EulerOS-SA-2021-2370)
2021-09-14 00:00:00
EulerOS Virtualization 3.0.6.6 : freerdp (EulerOS-SA-2021-1472)
2021-03-10 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for freerdp (EulerOS-SA-2021-2370)
2021-09-15 00:00:00
Huawei EulerOS: Security Advisory for freerdp (EulerOS-SA-2021-1785)
2021-05-03 00:00:00
Huawei EulerOS: Security Advisory for freerdp (EulerOS-SA-2021-1675)
2021-03-24 00:00:00
ubuntu
ubuntu
FreeRDP vulnerabilities
2020-11-26 00:00:00
FreeRDP vulnerabilities
2020-06-04 00:00:00
FreeRDP vulnerabilities
2020-06-01 00:00:00
osv
osv
freerdp vulnerabilities
2020-11-26 18:47:18
freerdp - security update
2020-08-30 00:00:00
Moderate: freerdp and vinagre security, bug fix, and enhancement update
2020-11-03 12:23:37
debian
debian
[SECURITY] [DLA 2356-1] freerdp security update
2020-08-29 23:51:52
[SECURITY] [DLA 3606-1] freerdp2 security update
2023-10-07 18:09:17
almalinux
almalinux
Moderate: freerdp and vinagre security, bug fix, and enhancement update
2020-11-03 12:23:37
oraclelinux
oraclelinux
freerdp security, bug fix, and enhancement update
2020-10-06 00:00:00
freerdp and vinagre security, bug fix, and enhancement update
2020-11-10 00:00:00
redhat
redhat
rocky
rocky
freerdp and vinagre security, bug fix, and enhancement update
2020-11-03 12:23:37
amazon
amazon
Medium: freerdp
2020-10-22 17:36:00
centos
centos
freerdp, libwinpr security update
2020-10-20 18:03:15
mageia
mageia
Updated freerdp/remmina packages fix security vulnerability
2020-08-01 02:25:42