Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2020-11018

Out of bound read in cliprdr_server_receive_capabilities in FreeRDP

Description

In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. This has been fixed in 2.1.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FreeRDP FreeRDP

  • <= 2.0.0affected

References