CVE-2020-11098

CVE-2020-11098

Name

CVE-2020-11098

Description

In FreeRDP before version 2.1.2, there is an out-of-bound read in glyph_cache_put. This affects all FreeRDP clients with `+glyph-cache` option enabled This is fixed in version 2.1.2.

NVD Severity

medium

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

Type	URI
Mitigation	https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jr57-f58x-hjmv
Patch	https://github.com/FreeRDP/FreeRDP/commit/c0fd449ec0870b050d350d6d844b1ea6dad4bc7d
Release Notes	http://www.freerdp.com/2020/06/22/2_1_2-released
SUSE	http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html
FEDORA	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y35HBHG2INICLSGCIKNAR7GCXEHQACQ/
FEDORA	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOZLH35OJWIQLM7FYDXAP2EAUBDXE76V/
UBUNTU	https://usn.ubuntu.com/4481-1/

Type

URI

Mitigation

https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jr57-f58x-hjmv

Patch

https://github.com/FreeRDP/FreeRDP/commit/c0fd449ec0870b050d350d6d844b1ea6dad4bc7d

Release Notes

http://www.freerdp.com/2020/06/22/2_1_2-released

SUSE

http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html

FEDORA

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y35HBHG2INICLSGCIKNAR7GCXEHQACQ/