CVE-2020-11040: Out-of-bounds Read in FreeRDP
In FreeRDP less than or equal to 2.0.0, there is an out-of-bound data read from memory in cleardecompresssubcoderlex, visualized on screen as color. This has been patched in 2.1.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
FreeRDPto a version that resolves this vulnerability.Fixed in 2.1.0
Event History
Frequently Asked Questions
What is CVE-2020-11040?
CVE-2020-11040 is a vulnerability in FreeRDP version 2.0.0 or earlier that allows an out-of-bound data read from memory.
How does CVE-2020-11040 impact FreeRDP?
CVE-2020-11040 allows an attacker to read data from memory outside the boundaries, potentially leading to information disclosure or a crash.
What is the severity rating of CVE-2020-11040?
CVE-2020-11040 has a severity rating of medium with a value of 2.7.
Which versions of FreeRDP are affected by CVE-2020-11040?
FreeRDP versions up to and including 2.0.0 are affected by CVE-2020-11040.
How can I fix CVE-2020-11040?
You can fix CVE-2020-11040 by upgrading FreeRDP to version 2.1.0 or later where the vulnerability has been patched.