ISOMAN

CVE

CVE-2020-11044

In FreeRDP greater than 1.2 and before 2.0.0, a double free in update_read_cache_bitmap_v3_order crashes the client application if corrupted data from a manipulated server is parsed. This has been patched in 2.0.0.

Severity
LOW
CVSS
2.2
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu20.04.6 amd64 desktopunknownsource
Ubuntu20.04.6 amd64 live-serverunknownsource
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource

References

  1. https://github.com/FreeRDP/FreeRDP/commit/67c2aa52b2ae0341d469071d1bc8aab91f8d2ed8
  2. https://github.com/FreeRDP/FreeRDP/issues/6013
  3. https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cgqh-p732-6x2w
  4. https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
  5. https://usn.ubuntu.com/4379-1/
  6. https://github.com/FreeRDP/FreeRDP/commit/67c2aa52b2ae0341d469071d1bc8aab91f8d2ed8
  7. https://github.com/FreeRDP/FreeRDP/issues/6013
  8. https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cgqh-p732-6x2w
  9. https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
  10. https://usn.ubuntu.com/4379-1/