CVE-2020-4030

2020-06-22T00:00:00
ID UB:CVE-2020-4030
Type ubuntucve
Reporter ubuntu.com
Modified 2020-06-22T00:00:00

Description

In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks due to an integer overflow. This is fixed in version 2.1.2.

Notes

Author| Note
---|---
mdeslaur | The freerdp package in Ubuntu 16.04 LTS and Ubuntu 18.04 LTS does not build a server library. This is simply a client denial of service that has a negligible security impact.