vulnerability

Red Hat: CVE-2020-11018: CVE-2020-11018 freerdp: Out of bound read in cliprdr_server_receive_capabilities (Multiple Advisories)

Severity
4
CVSS
(AV:N/AC:L/Au:S/C:N/I:N/A:P)
Published
May 29, 2020
Added
Oct 1, 2020
Modified
Aug 11, 2025

Description

In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. This has been fixed in 2.1.0.

Solutions

no-fix-redhat-rpm-packageredhat-upgrade-freerdpredhat-upgrade-freerdp-debuginforedhat-upgrade-freerdp-debugsourceredhat-upgrade-freerdp-develredhat-upgrade-freerdp-libsredhat-upgrade-freerdp-libs-debuginforedhat-upgrade-libwinprredhat-upgrade-libwinpr-debuginforedhat-upgrade-libwinpr-develredhat-upgrade-vinagreredhat-upgrade-vinagre-debuginforedhat-upgrade-vinagre-debugsource
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.