← All advisories

Unrated severityNVD Advisory· Published May 7, 2020· Updated Aug 4, 2024

Improper Restriction of Operations within the Bounds of a Memory Buffer in FreeRDP

CVE-2020-11046

Description

In FreeRDP after 1.0 and before 2.0.0, there is a stream out-of-bounds seek in update_read_synchronize that could lead to a later out-of-bounds read.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Freerdp/Freerdpllm-fuzzy2 versions
>=1.0, <2.0.0+ 1 more
- (no CPE)range: >=1.0, <2.0.0
- (no CPE)range: > 1.0, < 2.0.0
osv-coords2 versions
pkg:rpm/almalinux/freerdp-devel pkg:rpm/almalinux/vinagre
< 2:2.1.1-1.el8+ 1 more
- (no CPE)range: < 2:2.1.1-1.el8
- (no CPE)range: < 3.22.0-23.el8

Patches

Vulnerability mechanics

References

7

usn.ubuntu.com/4379-1/mitrevendor-advisory
usn.ubuntu.com/4382-1/mitrevendor-advisory
lists.debian.org/debian-lts-announce/2020/08/msg00054.htmlmitremailing-list
lists.debian.org/debian-lts-announce/2023/10/msg00008.htmlmitremailing-list
github.com/FreeRDP/FreeRDP/commit/ed53cd148f43cbab905eaa0f5308c2bf3c48cc37mitre
github.com/FreeRDP/FreeRDP/issues/6006mitre
github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hx48-wmmm-mr5qmitre

News mentions

0

No linked articles in our index yet.