VDB

CVE-2020-11097

CVE-2020-11097 PUBLISHED

In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2.

EPSS 0.18% · 39.3th percentile

Risk Scores

EPSS Score
0.18%
39.3th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSfreerdp0, 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1, 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2
Ubuntu:16.04:LTSfreerdp0, 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4, 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1
Ubuntu:20.04:LTSfreerdp2*, 0, 2.0.0~git20190204.1.2693389a+dfsg1-1
Ubuntu:18.04:LTSfreerdp22.1.1+dfsg1-0ubuntu0.18.04.1, *, *

Exploit Intelligence

…and 11 more exploits

Timeline

  • Jun 22, 2020 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 24, 2021 EPSS Score
  • Dec 27, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Feb 28, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • Jul 3, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score
  • Nov 6, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›