p PatchFirst

CVE-2020-11099

CVE-2020-11099 · OOB Read in license_read_new_or_upgrade_license_packet in FreeRDP

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In FreeRDP before version 2.1.2, there is an out of bounds read in license_read_new_or_upgrade_license_packet. A manipulated license packet can lead to out of bound reads to an internal buffer. This is fixed in version 2.1.2.

CVSS 3.5 · Low · EPSS 2.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • freerdp

    Versions
    • < 2.1.2: Affected

    No fix published

  • freerdp2 Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.1.2+dfsg1-1

    Update to 2.1.2+dfsg1-1

  • freerdp2 Ubuntu:18.04:LTS

    Versions
    • 2.0.0~git20170725.1.1648deb+dfsg1-1
    • 2.0.0~git20170725.1.1648deb+dfsg1-5
    • 2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu1
    • 2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu2
    • 2.0.0~git20170725.1.1648deb+dfsg1-6
    • 2.0.0~git20170725.1.1648deb+dfsg1-6build1
    • 2.0.0~git20170725.1.1648deb+dfsg1-7
    • 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1
    • 2.1.1+dfsg1-0ubuntu0.18.04.1
    Affected ranges
    • ECOSYSTEM: < 2.2.0+dfsg1-0ubuntu0.18.04.1

    Update to 2.2.0+dfsg1-0ubuntu0.18.04.1

  • freerdp2 Ubuntu:20.04:LTS

    Versions
    • 2.0.0~git20190204.1.2693389a+dfsg1-1
    • 2.0.0~git20190204.1.2693389a+dfsg1-2
    • 2.0.0~git20190204.1.2693389a+dfsg1-2build1
    • 2.0.0~git20190204.1.2693389a+dfsg1-2build2
    • 2.1.1+dfsg1-0ubuntu0.20.04.1
    Affected ranges
    • ECOSYSTEM: < 2.2.0+dfsg1-0ubuntu0.20.04.1

    Update to 2.2.0+dfsg1-0ubuntu0.20.04.1

Original sources

Check your server →