CVE-2020-11041

Katalog CVE

CVSS 2.7 · Low EPSS 1,4%

Kerentanan Improper Validation of Array Index pada freerdp, opensuse leap +1 lainnya. Skor CVSS 3.1 2.7 (Low) menurut NVD.

Deskripsi (NVD)

In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend (alsa, oss, pulse, ...). The most likely outcome is a crash of the client instance followed by no or distorted sound or a session disconnect. If a user cannot upgrade to the patched version, a workaround is to disable sound for the session. This has been patched in 2.1.0.

Rincian

Terbit di NVD

29 Mei 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

2.7 (Low), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-129: Improper Validation of Array Index

EPSS (30 hari)

1,4% peluang dieksploitasi; lebih tinggi dari 71,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html advisory pihak ketiga
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-w67c-26c4-2h9w advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html mailing list · advisory pihak ketiga