CVE-2020-11526

Published: 15 May 2020

libfreerdp/core/update.c in FreeRDP versions > 1.1 through 2.0.0-rc4 has an Out-of-bounds Read.

Priority

Low

CVSS 3 base score: 2.2

Status

Package Release Status
freerdp
Launchpad, Ubuntu, Debian
Upstream
Released (1.1.0~git20140921.1.440916e+dfsg1-13+deb9u4)
Ubuntu 21.04 (Hirsute Hippo) Does not exist

Ubuntu 20.10 (Groovy Gorilla) Does not exist

Ubuntu 20.04 LTS (Focal Fossa) Does not exist

Ubuntu 18.04 LTS (Bionic Beaver)
Released (1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2)
Ubuntu 16.04 LTS (Xenial Xerus)
Released (1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

freerdp2
Launchpad, Ubuntu, Debian
Upstream Needs triage

Ubuntu 21.04 (Hirsute Hippo) Not vulnerable
(2.1.1+dfsg1-1)
Ubuntu 20.10 (Groovy Gorilla) Not vulnerable
(2.1.1+dfsg1-1)
Ubuntu 20.04 LTS (Focal Fossa)
Released (2.1.1+dfsg1-0ubuntu0.20.04.1)
Ubuntu 18.04 LTS (Bionic Beaver)
Released (2.1.1+dfsg1-0ubuntu0.18.04.1)
Ubuntu 16.04 LTS (Xenial Xerus) Does not exist

Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

Patches:
Upstream: https://github.com/FreeRDP/FreeRDP/commit/192856cb59974ee4d7d3e72cbeafa676aa7565cf