CVE-2020-11097

CVE-2020-11097: In FreeRDP before 2.1.2, there is an out-of-bounds read that accesses memory outside the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. The root cause is an OOB read in ntlm_av_pair_get, with the issue fixed in FreeRDP 2.1.2. Public advisories and Debian ARNs co...

The vulnerability of the FreeRDP remote desktop protocol lies in the fact that resources are not released after their useful life has ended. This allows a malicious actor to cause service failures.

The vulnerability of the FreeRDPr remote desktop protocol implementation is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability allows a malicious actor to cause service failures...

CVE-2020-4032 Integer casting vulnerability in `update_recv_secondary_order` in FreeRDP

In FreeRDP before version 2.1.2, there is an integer casting vulnerability in updaterecvsecondaryorder. All clients with +glyph-cache /relax-order-checks are affected. This is fixed in version 2.1.2...

CVE-2020-11097 OOB read in ntlm_av_pair_get in FreeRDP

In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARYDRAWINGORDERFIELDBYTES. This is fixed in version 2.1.2...

CVE-2020-11098

CVE-2020-11098 : FreeRDP before version 2.1.2 contains an out-of-bounds read in glyph_cache_put, affecting all FreeRDP clients with the +glyph-cache option enabled. The issue is fixed in version 2.1.2. Affected products/versions are limited to FreeRDP prior to 2.1.2; there is no exploitation deta...

CVE-2020-4031 Use-After-Free in gdi_SelectObject in FreeRDP

In FreeRDP before version 2.1.2, there is a use-after-free in gdiSelectObject. All FreeRDP clients using compatibility mode with /relax-order-checks are affected. This is fixed in version 2.1.2...

CVE-2020-4033 OOB Read in RLEDECOMPRESS in FreeRDP

In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS. All FreeRDP based clients with sessions with color depth 32 are affected. This is fixed in version 2.1.2...

CVE-2020-11095

CVE-2020-11095 affects FreeRDP prior to 2.1.2, where an out-of-bounds read accesses memory outside the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. Multiple connected sources (Debian/Alpine advisories and related vendor notes) confirm this exact flaw and its fix in version 2....

CVE-2020-11097

In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARYDRAWINGORDERFIELDBYTES. This is fixed in version 2.1.2...

CVE-2020-11098

In FreeRDP before version 2.1.2, there is an out-of-bound read in glyphcacheput. This affects all FreeRDP clients with +glyph-cache option enabled This is fixed in version 2.1.2...

CVE-2020-4031

In FreeRDP before version 2.1.2, there is a use-after-free in gdiSelectObject. All FreeRDP clients using compatibility mode with /relax-order-checks are affected. This is fixed in version 2.1.2...

CVE-2020-4032

In FreeRDP before version 2.1.2, there is an integer casting vulnerability in updaterecvsecondaryorder. All clients with +glyph-cache /relax-order-checks are affected. This is fixed in version 2.1.2...

CVE-2020-4033

In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS. All FreeRDP based clients with sessions with color depth 32 are affected. This is fixed in version 2.1.2...

CVE-2020-4030 OOB read in `TrioParse` in FreeRDP

In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks due to an integer overflow. This is fixed in version 2.1.2...

CVE-2020-4033

CVE-2020-4033 : In FreeRDP before 2.1.2, there is an out-of-bounds read in RLEDECOMPRESS. All FreeRDP-based clients with sessions at color depth

CVE-2020-4030

FreeRDP contains an out-of-bounds read in TrioParse (CVE-2020-4030) with logging potentially bypassing string length checks due to an integer overflow. The issue is fixed in version 2.1.2. Several advisories (Arch, Debian LTS, AlmaLinux, Fedora) document this and related CVEs as part of a broader...

CVE-2020-11096 Global OOB read in update_read_cache_bitmap_v3_order in FreeRDP

In FreeRDP before version 2.1.2, there is a global OOB read in updatereadcachebitmapv3order. As a workaround, one can disable bitmap cache with -bitmap-cache default. This is fixed in version 2.1.2...

CVE-2020-4031

CVE-2020-4031 affects FreeRDP prior to 2.1.2, with a use-after-free in the gdi_SelectObject path. All FreeRDP clients operating in compatibility mode using /relax-order-checks are exposed. The issue is mitigated by upgrading to FreeRDP 2.1.2 or later, which contains the fix. The available documen...

CVE-2020-11099

CVE-2020-11099 affects FreeRDP before 2.1.2, with an out-of-bounds read in the function license_read_new_or_upgrade_license_packet that can read beyond an internal buffer when a license packet is manipulated. The vulnerability is fixed in version 2.1.2. Multiple connected sources (e.g., Debian, A...

CVE-2020-11096

FreeRDP vulnerability CVE-2020-11096 affects FreeRDP up to version 2.1.2, caused by a global out-of-bounds (OOB) read in update_read_cache_bitmap_v3_order. The workaround is to disable bitmap cache (-bitmap-cache, which is the default). The issue is fixed in version 2.1.2. Related advisories conf...