CVE-2020-11085: Out-of-bounds Read in FreeRDP
Published May 29, 2020
·Updated
In FreeRDP before 2.1.0, there is an out-of-bounds read in cliprdrreadformatlist. Clipboard format data read (by client or server) might read data out-of-bounds. This has been fixed in 2.1.0.
Affected Software
3 affected components
FreeRDP freerdp<2.1.0
openSUSE Leap=15.1
Debian Debian Linux=10.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
FreeRDPto a version that resolves this vulnerability.Fixed in 2.1.0
Event History
May 29, 2020
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Event
08:15 PM
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2020-11085.
2
What is the severity level of CVE-2020-11085?
CVE-2020-11085 has a severity level of medium.
3
What is the CWE ID associated with CVE-2020-11085?
The CWE ID associated with CVE-2020-11085 is CWE-125.
4
Which software versions are affected by CVE-2020-11085?
FreeRDP versions before 2.1.0, openSUSE Leap 15.1, and Debian Debian Linux 10.0 are affected by CVE-2020-11085.
5
How can I fix CVE-2020-11085?
To fix CVE-2020-11085, update FreeRDP to version 2.1.0 or a later release.