CVE-2020-13396: High severity FreeRDP freerdp vulnerability
Published May 22, 2020
·Updated
An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in ntlmreadChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlmmessage.c.
Affected Software
11 affected componentsFixes available
FreeRDP freerdp<2.1.1
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=18.04
Canonical Ubuntu Linux=19.10
Canonical Ubuntu Linux=20.04
Debian Debian Linux=9.0
Debian Debian Linux=10.0
openSUSE Leap=15.1
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=18.04
debian/freerdp2
2.3.0+dfsg1-2+deb11u12.3.0+dfsg1-2+deb11u32.11.7+dfsg1-6~deb12u1
Remediation
Event History
May 22, 2020
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Jan 11, 2024
Data Sourced
via Launchpad·11:39 PM
Description
Feb 22, 2026
Data Sourced
via Ubuntu·03:44 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Debian·03:46 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is CVE-2020-13396?
CVE-2020-13396 is an out-of-bounds (OOB) read vulnerability in FreeRDP before version 2.1.1.
2
Which software versions are affected by CVE-2020-13396?
FreeRDP versions before 2.1.1 are affected by CVE-2020-13396.
3
What is the severity of CVE-2020-13396?
CVE-2020-13396 has a severity rating of 7.1 (high).
4
How can I fix CVE-2020-13396?
To fix CVE-2020-13396, update FreeRDP to version 2.1.1 or later.
5
Where can I find more information about CVE-2020-13396?
You can find more information about CVE-2020-13396 on the CVE website (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13396) and the FreeRDP GitHub page.