CVE-2020-11048

Опубликовано: 07 мая 2020

Источник: nvd

CVSS3: 2.2

CVSS2: 3.5

EPSS Низкий

Описание

In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bounds read. It only allows to abort a session. No data extraction is possible. This has been fixed in 2.0.0.

Ссылки

https://github.com/FreeRDP/FreeRDP/commit/9301bfe730c66180263248b74353daa99f5a969b
Patch
Third Party Advisory
https://github.com/FreeRDP/FreeRDP/issues/6007
Exploit
Third Party Advisory
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hv8w-f2hx-5gcv
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/08/msg00054.html
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
Mailing List
Third Party Advisory
https://usn.ubuntu.com/4379-1/
Third Party Advisory
https://usn.ubuntu.com/4382-1/
Third Party Advisory
https://github.com/FreeRDP/FreeRDP/commit/9301bfe730c66180263248b74353daa99f5a969b
Patch
Third Party Advisory
https://github.com/FreeRDP/FreeRDP/issues/6007
Exploit
Third Party Advisory
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hv8w-f2hx-5gcv
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/08/msg00054.html
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
Mailing List
Third Party Advisory
https://usn.ubuntu.com/4379-1/
Third Party Advisory
https://usn.ubuntu.com/4382-1/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*

Версия от 1.0.0 (включая) до 2.0.0 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 28%

0.00095

Низкий

2.2 Low

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVE-2020-11048

CVSS3: 2.2

ubuntu

около 5 лет назад

In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bounds read. It only allows to abort a session. No data extraction is possible. This has been fixed in 2.0.0.

CVE-2020-11048

CVSS3: 2.2

redhat

около 5 лет назад

In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bounds read. It only allows to abort a session. No data extraction is possible. This has been fixed in 2.0.0.

CVE-2020-11048

CVSS3: 2.2

debian

около 5 лет назад

In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bounds read. ...

RLSA-2020:4647

rocky

больше 4 лет назад

Moderate: freerdp and vinagre security, bug fix, and enhancement update

ELSA-2020-4647

oracle-oval

больше 4 лет назад

ELSA-2020-4647: freerdp and vinagre security, bug fix, and enhancement update (MODERATE)

EPSS

Процентиль: 28%

0.00095

Низкий

2.2 Low

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-125