p PatchFirst

CVE-2020-11038

CVE-2020-11038 · Integer Overflow to Buffer Overflow in FreeRDP

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a manipulated server can instruct the client to allocate a buffer with a smaller size than requested due to an integer overflow in size calculation. With later messages, the server can manipulate the client to write data out of bound to the previously allocated buffer. This has been patched in 2.1.0.

CVSS 6.9 · Medium · EPSS 1.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • freerdp

    Versions
    • <= 2.0.0: Affected

    No fix published

  • freerdp2 Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.1.1+dfsg1-1

    Update to 2.1.1+dfsg1-1

  • freerdp2 Ubuntu:18.04:LTS

    Versions
    • 2.0.0~git20170725.1.1648deb+dfsg1-1
    • 2.0.0~git20170725.1.1648deb+dfsg1-5
    • 2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu1
    • 2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu2
    • 2.0.0~git20170725.1.1648deb+dfsg1-6
    • 2.0.0~git20170725.1.1648deb+dfsg1-6build1
    • 2.0.0~git20170725.1.1648deb+dfsg1-7
    • 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1
    Affected ranges
    • ECOSYSTEM: < 2.1.1+dfsg1-0ubuntu0.18.04.1

    Update to 2.1.1+dfsg1-0ubuntu0.18.04.1

  • freerdp2 Ubuntu:20.04:LTS

    Versions
    • 2.0.0~git20190204.1.2693389a+dfsg1-1
    • 2.0.0~git20190204.1.2693389a+dfsg1-2
    • 2.0.0~git20190204.1.2693389a+dfsg1-2build1
    • 2.0.0~git20190204.1.2693389a+dfsg1-2build2
    Affected ranges
    • ECOSYSTEM: < 2.1.1+dfsg1-0ubuntu0.20.04.1

    Update to 2.1.1+dfsg1-0ubuntu0.20.04.1

Original sources

Check your server →