CVE-2020-4031

In FreeRDP before version 2.1.2, there is a use-after-free in gdiSelectObject. All FreeRDP clients using compatibility mode with /relax-order-checks are affected. This is fixed in version 2.1.2...

CVE-2020-4033 OOB Read in RLEDECOMPRESS in FreeRDP

In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS. All FreeRDP based clients with sessions with color depth 32 are affected. This is fixed in version 2.1.2...

CVE-2020-11098

CVE-2020-11098 : FreeRDP before version 2.1.2 contains an out-of-bounds read in glyph_cache_put, affecting all FreeRDP clients with the +glyph-cache option enabled. The issue is fixed in version 2.1.2. Affected products/versions are limited to FreeRDP prior to 2.1.2; there is no exploitation deta...

CVE-2020-11099

CVE-2020-11099 affects FreeRDP before 2.1.2, with an out-of-bounds read in the function license_read_new_or_upgrade_license_packet that can read beyond an internal buffer when a license packet is manipulated. The vulnerability is fixed in version 2.1.2. Multiple connected sources (e.g., Debian, A...

CVE-2020-11096

FreeRDP vulnerability CVE-2020-11096 affects FreeRDP up to version 2.1.2, caused by a global out-of-bounds (OOB) read in update_read_cache_bitmap_v3_order. The workaround is to disable bitmap cache (-bitmap-cache, which is the default). The issue is fixed in version 2.1.2. Related advisories conf...

CVE-2020-4031

CVE-2020-4031 affects FreeRDP prior to 2.1.2, with a use-after-free in the gdi_SelectObject path. All FreeRDP clients operating in compatibility mode using /relax-order-checks are exposed. The issue is mitigated by upgrading to FreeRDP 2.1.2 or later, which contains the fix. The available documen...

CVE-2020-11095

CVE-2020-11095 affects FreeRDP prior to 2.1.2, where an out-of-bounds read accesses memory outside the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. Multiple connected sources (Debian/Alpine advisories and related vendor notes) confirm this exact flaw and its fix in version 2....

CVE-2020-11099

In FreeRDP before version 2.1.2, there is an out of bounds read in licensereadneworupgradelicensepacket. A manipulated license packet can lead to out of bound reads to an internal buffer. This is fixed in version 2.1.2...

CVE-2020-4030

In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks due to an integer overflow. This is fixed in version 2.1.2...

CVE-2020-11096

In FreeRDP before version 2.1.2, there is a global OOB read in updatereadcachebitmapv3order. As a workaround, one can disable bitmap cache with -bitmap-cache default. This is fixed in version 2.1.2...

CVE-2020-11098

In FreeRDP before version 2.1.2, there is an out-of-bound read in glyphcacheput. This affects all FreeRDP clients with +glyph-cache option enabled This is fixed in version 2.1.2...

CVE-2020-11099

In FreeRDP before version 2.1.2, there is an out of bounds read in licensereadneworupgradelicensepacket. A manipulated license packet can lead to out of bound reads to an internal buffer. This is fixed in version 2.1.2...

CVE-2020-11099 OOB Read in license_read_new_or_upgrade_license_packet in FreeRDP

In FreeRDP before version 2.1.2, there is an out of bounds read in licensereadneworupgradelicensepacket. A manipulated license packet can lead to out of bound reads to an internal buffer. This is fixed in version 2.1.2...

CVE-2020-4032 Integer casting vulnerability in `update_recv_secondary_order` in FreeRDP

In FreeRDP before version 2.1.2, there is an integer casting vulnerability in updaterecvsecondaryorder. All clients with +glyph-cache /relax-order-checks are affected. This is fixed in version 2.1.2...

CVE-2020-4032

CVE-2020-4032 affects FreeRDP prior to 2.1.2, where an integer casting vulnerability occurs in update_recv_secondary_order. All clients with +glyph-cache or /relax-order-checks are affected. The issue is fixed in version 2.1.2. The connected sources consistently describe this as a vulnerability i...

CVE-2020-11096 Global OOB read in update_read_cache_bitmap_v3_order in FreeRDP

In FreeRDP before version 2.1.2, there is a global OOB read in updatereadcachebitmapv3order. As a workaround, one can disable bitmap cache with -bitmap-cache default. This is fixed in version 2.1.2...

The vulnerability of the FreeRDP remote desktop protocol lies in the fact that resources are not released after their useful life has ended. This allows a malicious actor to cause service failures.

The vulnerability of the FreeRDPr remote desktop protocol implementation is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability allows a malicious actor to cause service failures...

CVE-2020-4033

In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS. All FreeRDP based clients with sessions with color depth 32 are affected. This is fixed in version 2.1.2...

CVE-2020-4030

In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks due to an integer overflow. This is fixed in version 2.1.2...

CVE-2020-4031

In FreeRDP before version 2.1.2, there is a use-after-free in gdiSelectObject. All FreeRDP clients using compatibility mode with /relax-order-checks are affected. This is fixed in version 2.1.2...