CVE-2020-11017
29.05.2020, 16:15
In FreeRDP less than or equal to 2.0.0, by providing manipulated input a malicious client can create a double free condition and crash the server. This is fixed in version 2.1.0.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| freerdp | freerdp | 𝑥 < 2.1.0 |
| opensuse | leap | 15.1 |
| debian | debian_linux | 10.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| freerdp |
| ||||||||||||||||||||||||||||||||
| freerdp-devel |
| ||||||||||||||||||||||||||||||||
| freerdp-proxy |
| ||||||||||||||||||||||||||||||||
| libfreerdp2 |
| ||||||||||||||||||||||||||||||||
| libwinpr2 |
| ||||||||||||||||||||||||||||||||
| winpr2-devel |
|
Common Weakness Enumeration
References