CVE-2020-11017 PUBLISHED

In FreeRDP less than or equal to 2.0.0, by providing manipulated input a malicious client can create a double free condition and crash the server. This is fixed in version 2.1.0.

EPSS 0.23% · 46.0th percentile

Risk Scores

EPSS Score
0.23%
46.0th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSfreerdp20, 2.0.0~git20190204.1.2693389a+dfsg1-1, 2.0.0~git20190204.1.2693389a+dfsg1-2
Ubuntu:18.04:LTSfreerdp22.0.0~git20170725.1.1648deb+dfsg1-6, 2.0.0~git20170725.1.1648deb+dfsg1-6build1, 0

Timeline

References

Open in Interactive Console →