vulnerability

SUSE: CVE-2020-11089: SUSE Linux Security Advisory

Severity
6
CVSS
(AV:N/AC:M/Au:S/C:P/I:P/A:P)
Published
May 29, 2020
Added
Jul 27, 2020
Modified
Feb 4, 2022

Description

In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions (parallel_process_irp_create, serial_process_irp_create, drive_process_irp_write, printer_process_irp_write, rdpei_recv_pdu, serial_process_irp_write). This has been fixed in 2.1.0.

Solution(s)

suse-upgrade-freerdpsuse-upgrade-freerdp-develsuse-upgrade-freerdp-proxysuse-upgrade-freerdp-serversuse-upgrade-freerdp-waylandsuse-upgrade-libfreerdp2suse-upgrade-libuwac0-0suse-upgrade-libwinpr2suse-upgrade-uwac0-0-develsuse-upgrade-vinagresuse-upgrade-vinagre-langsuse-upgrade-winpr2-devel
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.