CVE-2020-4032 PUBLISHED

In FreeRDP before version 2.1.2, there is an integer casting vulnerability in update_recv_secondary_order. All clients with +glyph-cache /relax-order-checks are affected. This is fixed in version 2.1.2.

EPSS 0.41% · 60.9th percentile

Risk Scores

EPSS Score
0.41%
60.9th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSfreerdp20, 2.0.0~git20170725.1.1648deb+dfsg1-1, 2.0.0~git20170725.1.1648deb+dfsg1-5
Ubuntu:20.04:LTSfreerdp20, 2.0.0~git20190204.1.2693389a+dfsg1-1, 2.0.0~git20190204.1.2693389a+dfsg1-2

Timeline

References

Open in Interactive Console →