Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2020-11017

Double free in cliprdr_server_receive_capabilities in FreeRDP

Description

In FreeRDP less than or equal to 2.0.0, by providing manipulated input a malicious client can create a double free condition and crash the server. This is fixed in version 2.1.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FreeRDP FreeRDP

  • <= 2.0.0affected

References