ZeroHour

CVE-2020-11099

CVSS 3.1
6.5 medium
EPSS
2%p81
Published
()
Modified
Description

In FreeRDP before version 2.1.2, there is an out of bounds read in license_read_new_or_upgrade_license_packet. A manipulated license packet can lead to out of bound reads to an internal buffer. This is fixed in version 2.1.2.

Vendors
freerdpopensusefedoraprojectcanonicaldebian
Products
freerdp, leap, fedora, ubuntu linux, debian linux
Weakness
CWE-125
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

In the news

No ingested article mentions this CVE yet.