CVE-2020-11058

Katalog CVE

CVSS 2.2 · Low EPSS 1,6%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada freerdp, canonical ubuntu linux +1 lainnya. Skor CVSS 3.1 2.2 (Low) menurut NVD.

Deskripsi (NVD)

In FreeRDP after 1.1 and before 2.0.0, a stream out-of-bounds seek in rdp_read_font_capability_set could lead to a later out-of-bounds read. As a result, a manipulated client or server might force a disconnect due to an invalid data read. This has been fixed in 2.0.0.

Rincian

Terbit di NVD

12 Mei 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

2.2 (Low), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-125: Out-of-bounds Read

EPSS (30 hari)

1,6% peluang dieksploitasi; lebih tinggi dari 75,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/FreeRDP/FreeRDP/commit/3627aaf7d289315b614a584afb388f04abfb5bbf patch · advisory pihak ketiga
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-wjg2-2f82-466g patch · advisory pihak ketiga
• https://github.com/FreeRDP/FreeRDP/issues/6011 advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/08/msg00054.html advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html mailing list · advisory pihak ketiga
• https://usn.ubuntu.com/4379-1/ advisory pihak ketiga
• https://usn.ubuntu.com/4382-1/ advisory pihak ketiga