Lucene search

K
redhatcveRedhat.comRH:CVE-2020-4032
HistoryJul 08, 2020 - 11:51 a.m.

CVE-2020-4032

2020-07-0811:51:30
redhat.com
access.redhat.com
10

EPSS

0.001

Percentile

49.6%

In FreeRDP before version 2.1.2, there is an integer casting vulnerability in update_recv_secondary_order. All clients with +glyph-cache /relax-order-checks are affected. This is fixed in version 2.1.2.

Mitigation

Do not run the freerdp client with the +glyph-cache and /relax-order-checks options.