CVE-2020-11099

CVE-2020-11099

Name

CVE-2020-11099

Description

In FreeRDP before version 2.1.2, there is an out of bounds read in license_read_new_or_upgrade_license_packet. A manipulated license packet can lead to out of bound reads to an internal buffer. This is fixed in version 2.1.2.

NVD Severity

medium

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

Type	URI
Patch	https://github.com/FreeRDP/FreeRDP/commit/6ade7b4cbfd71c54b3d724e8f2d6ac76a58e879a
Third Party Advisory	https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-977w-866x-4v5h
Release Notes	http://www.freerdp.com/2020/06/22/2_1_2-released
SUSE	http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html
FEDORA	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y35HBHG2INICLSGCIKNAR7GCXEHQACQ/
FEDORA	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOZLH35OJWIQLM7FYDXAP2EAUBDXE76V/
UBUNTU	https://usn.ubuntu.com/4481-1/

Type

URI

Patch

https://github.com/FreeRDP/FreeRDP/commit/6ade7b4cbfd71c54b3d724e8f2d6ac76a58e879a

Third Party Advisory

https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-977w-866x-4v5h

Release Notes

http://www.freerdp.com/2020/06/22/2_1_2-released

SUSE

http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html

FEDORA

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y35HBHG2INICLSGCIKNAR7GCXEHQACQ/