Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-13396

Опубликовано: 22 мая 2020
Источник: redhat
CVSS3: 7.1
EPSS Низкий

Описание

An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6freerdpOut of support scope
Red Hat Enterprise Linux 7freerdpFixedRHSA-2020:403129.09.2020
Red Hat Enterprise Linux 8freerdpFixedRHSA-2020:464704.11.2020
Red Hat Enterprise Linux 8vinagreFixedRHSA-2020:464704.11.2020

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=1841189freerdp: Out-of-bounds read in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c.

EPSS

Процентиль: 59%
0.00382
Низкий

7.1 High

CVSS3

Связанные уязвимости

CVSS3: 7.1
ubuntu
около 5 лет назад

An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c.

CVSS3: 7.1
nvd
около 5 лет назад

An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c.

CVSS3: 7.1
debian
около 5 лет назад

An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB ...

CVSS3: 7.1
github
около 3 лет назад

An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c.

rocky
больше 4 лет назад

Moderate: freerdp and vinagre security, bug fix, and enhancement update

EPSS

Процентиль: 59%
0.00382
Низкий

7.1 High

CVSS3