CVE-2020-11045: Out-of-bounds Read in FreeRDP
Published May 7, 2020
·Updated
In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bound read in in updatereadbitmapdata that allows client memory to be read to an image buffer. The result displayed on screen as colour.
Affected Software
8 affected componentsFixes available
debian/freerdp2
2.3.0+dfsg1-2+deb11u12.3.0+dfsg1-2+deb11u32.10.0+dfsg1-1
FreeRDP freerdp>=1.1.0<2.0.0
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=18.04
Canonical Ubuntu Linux=19.10
Canonical Ubuntu Linux=20.04
Remediation
Event History
May 7, 2020
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Jan 11, 2024
Data Sourced
via Launchpad·11:35 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·02:20 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-11045?
The severity of CVE-2020-11045 is classified as medium, indicating potential impact on client memory security.
2
How do I fix CVE-2020-11045?
To fix CVE-2020-11045, ensure that you update FreeRDP to version 2.3.0+dfsg1-2+deb11u1 or later.
3
What versions of FreeRDP are affected by CVE-2020-11045?
CVE-2020-11045 affects FreeRDP versions after 1.0 and before 2.0.0.
4
Is CVE-2020-11045 present in Debian 9.0?
Yes, CVE-2020-11045 is present in Debian 9.0 if it is running an affected version of FreeRDP.
5
Can CVE-2020-11045 impact Ubuntu 20.04 users?
Yes, CVE-2020-11045 can impact Ubuntu 20.04 users if they are using a vulnerable version of FreeRDP.