ISOMAN

CVE

CVE-2020-11099

In FreeRDP before version 2.1.2, there is an out of bounds read in license_read_new_or_upgrade_license_packet. A manipulated license packet can lead to out of bound reads to an internal buffer. This is fixed in version 2.1.2.

Severity
LOW
CVSS
3.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu20.04.6 amd64 desktopunknownsource
Ubuntu20.04.6 amd64 live-serverunknownsource

References

  1. http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html
  2. http://www.freerdp.com/2020/06/22/2_1_2-released
  3. https://github.com/FreeRDP/FreeRDP/commit/6ade7b4cbfd71c54b3d724e8f2d6ac76a58e879a
  4. https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-977w-866x-4v5h
  5. https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
  6. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y35HBHG2INICLSGCIKNAR7GCXEHQACQ/
  7. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOZLH35OJWIQLM7FYDXAP2EAUBDXE76V/
  8. https://usn.ubuntu.com/4481-1/
  9. http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html
  10. http://www.freerdp.com/2020/06/22/2_1_2-released
  11. https://github.com/FreeRDP/FreeRDP/commit/6ade7b4cbfd71c54b3d724e8f2d6ac76a58e879a
  12. https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-977w-866x-4v5h
  13. https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
  14. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y35HBHG2INICLSGCIKNAR7GCXEHQACQ/
  15. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOZLH35OJWIQLM7FYDXAP2EAUBDXE76V/
  16. https://usn.ubuntu.com/4481-1/