CVE-2020-11521

Published: 15 May 2020

libfreerdp/codec/planar.c in FreeRDP version > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.

Priority

Low

CVSS 3 base score: 6.6

Status

Package Release Status
freerdp
Launchpad, Ubuntu, Debian
Upstream
Released (1.1.0~git20140921.1.440916e+dfsg1-13+deb9u4)
Ubuntu 20.04 LTS (Focal Fossa) Does not exist

Ubuntu 18.04 LTS (Bionic Beaver)
Released (1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2)
Ubuntu 16.04 ESM (Xenial Xerus)
Released (1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

freerdp2
Launchpad, Ubuntu, Debian
Upstream Needs triage

Ubuntu 20.04 LTS (Focal Fossa)
Released (2.1.1+dfsg1-0ubuntu0.20.04.1)
Ubuntu 18.04 LTS (Bionic Beaver)
Released (2.1.1+dfsg1-0ubuntu0.18.04.1)
Ubuntu 16.04 ESM (Xenial Xerus) Does not exist

Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

Patches:
Upstream: https://github.com/FreeRDP/FreeRDP/commit/17f547ae11835bb11baa3d045245dc1694866845