CVE-2020-11095

CVE-2020-11095

Name

CVE-2020-11095

Description

In FreeRDP before version 2.1.2, an out of bound reads occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2.

NVD Severity

medium

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

Type	URI
Patch	https://github.com/FreeRDP/FreeRDP/commit/733ee3208306b1ea32697b356c0215180fc3f049
Third Party Advisory	https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-563r-pvh7-4fw2
Release Notes	http://www.freerdp.com/2020/06/22/2_1_2-released
SUSE	http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html
FEDORA	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y35HBHG2INICLSGCIKNAR7GCXEHQACQ/
FEDORA	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOZLH35OJWIQLM7FYDXAP2EAUBDXE76V/
UBUNTU	https://usn.ubuntu.com/4481-1/

Type

URI

Patch

https://github.com/FreeRDP/FreeRDP/commit/733ee3208306b1ea32697b356c0215180fc3f049

Third Party Advisory

https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-563r-pvh7-4fw2

Release Notes

http://www.freerdp.com/2020/06/22/2_1_2-released

SUSE

http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html

FEDORA

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y35HBHG2INICLSGCIKNAR7GCXEHQACQ/