← Back

CVE-2020-11525

nvd nist
Published: May 15, 2020Modified: Nov 21, 2024

JSON object

Loading...
2.2
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L
Exploitability: 0.7 / Impact: 1.4
Source: NVD

Description

libfreerdp/cache/bitmap.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out of bounds read.

Affected (13)

Show all products
Freerdp: Freerdp · Canonical: Ubuntu Linux · Debian: Debian Linux · Opensuse: Leap
Freerdp
1 product
Freerdp
Canonical
1 product
Ubuntu Linux
Debian
1 product
Debian Linux
Opensuse
1 product
Leap
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Freerdp
Freerdp
After 1.0.0 to 2.0.0
Freerdp
Version 2.0.0
Freerdp
Version 2.0.0 rc0
Freerdp
Version 2.0.0 rc1
Freerdp
Version 2.0.0 rc2
Freerdp
Version 2.0.0 rc3
Freerdp
Version 2.0.0 rc4
Configuration B
6 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 16.04
Ubuntu Linux
Version 18.04
Ubuntu Linux
Version 19.10
Ubuntu Linux
Version 20.04
Debian Linux
Version 9.0
Leap
Version 15.1

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.

References (16)

Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
ExploitVendor Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.