Every CVE Search/ Get API key

CVE-2020-11523

freerdp - security update

6.6 MediumFix available

libfreerdp/gdi/region.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Integer Overflow.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.99%Up 0.3 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 6.6

libfreerdp/gdi/region.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Integer Overflow.

Record
CVE-2020-11523
CVSS 3.1
6.6 MediumCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
6.0 MediumAV:N/AC:M/Au:S/C:P/I:P/A:P
Weakness
CWE-190
Updated
2026-11-02
CVE List No score

libfreerdp/gdi/region.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Integer Overflow.

Record
CVE-2020-11523
Updated
2026-11-02
EUVDEUVD-2020-3876 No score

libfreerdp/gdi/region.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Integer Overflow.

Record
EUVD-2020-3876
Updated
2026-11-03
OSVALPINE-CVE-2020-11523 6.6

libfreerdp/gdi/region.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Integer Overflow.

Record
ALPINE-CVE-2020-11523
CVSS 3.1
6.6 MediumCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSV 6.6

libfreerdp/gdi/region.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Integer Overflow.

Record
CVE-2020-11523
CVSS 3.1
6.6 MediumCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2020-11523 6.6

libfreerdp/gdi/region.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Integer Overflow.

Record
DEBIAN-CVE-2020-11523
CVSS 3.1
6.6 MediumCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 16 moreShow less
OSVOESA-2021-1008 7.5

freerdp security update

FreeRDP is a client implementation of the Remote Desktop Protocol (RDP) that follows Microsoft's open specifications. This package provides the client applications xfreerdp and wlfreerdp.\r\n\r\n Security Fix(es):\r\n\r\n libfreerdp/core/update.c in FreeRDP versions > 1.1 through 2.0.0-rc4 has an Out-of-bounds Read.(CVE-2020-11526)\r\n\r\n In FreeRDP greater than 1.2 and before 2.0.0, a double free in update_read_cache_bitmap_v3_order crashes the client application if corrupted data from a manipulated server is parsed. This has been patched in 2.0.0.(CVE-2020-11044)\r\n\r\n In FreeRDP greater than 1.1 and before 2.0.0, there is an out-of-bounds read in update_read_icon_info. It allows reading a attacker-defined amount of client memory (32bit unsigned -> 4GB) to an intermediate buffer. This can be used to crash the client or store information for later retrieval. This has been patched in 2.0.0.(CVE-2020-11042)\r\n\r\n In FreeRDP before version 2.1.2, an out of bound reads occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2.(CVE-2020-11095)\r\n\r\n In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bound read in in update_read_bitmap_data that allows client memory to be read to an image buffer. The result displayed on screen as colour.(CVE-2020-11045)\r\n\r\n libfreerdp/gdi/gdi.c in FreeRDP > 1.0 through 2.0.0-rc4 has an Out-of-bounds Read.(CVE-2020-11522)\r\n\r\n libfreerdp/codec/interleaved.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.(CVE-2020-11524)\r\n\r\n libfreerdp/codec/planar.c in FreeRDP version > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.(CVE-2020-11521)\r\n\r\n libfreerdp/cache/bitmap.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out of bounds read.(CVE-2020-11525)\r\n\r\n libfreerdp/codec/planar.c in FreeRDP version > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.(CVE-2020-11521)\r\n\r\n libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied realloc pointer (i.e., the first argument to realloc) is also used for a realloc return value.(CVE-2019-17177)\r\n\r\n

Record
OESA-2021-1008
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2021-1085 6.6

freerdp security update

FreeRDP is a client implementation of the Remote Desktop Protocol (RDP) that follows Microsoft's open specifications. This package provides the client applications xfreerdp and wlfreerdp.

Security Fix(es):

libfreerdp/gdi/region.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Integer Overflow.(CVE-2020-11523)

Record
OESA-2021-1085
CVSS 3.1
6.6 MediumCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:2334 6.6

Red Hat Security Advisory: freerdp security update

Record
RHSA-2020:2334
CVSS 3.1
6.6 MediumCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:2335 6.6

Red Hat Security Advisory: freerdp security update

Record
RHSA-2020:2335
CVSS 3.1
6.6 MediumCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:2336 6.6

Red Hat Security Advisory: freerdp security update

Record
RHSA-2020:2336
CVSS 3.1
6.6 MediumCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:2354 6.6

Red Hat Security Advisory: freerdp security update

Record
RHSA-2020:2354
CVSS 3.1
6.6 MediumCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2020-11523 6.6

libfreerdp/gdi/region.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Integer Overflow.

Record
UBUNTU-CVE-2020-11523
CVSS 3.1
6.6 MediumCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2020-0297 No score

Updated freerdp/remmina packages fix security vulnerability

It was discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly exeucte arbitrary code.

The freerdp package has been updated to version 2.1.2 to fix these issues.

Also, the remmina package has been updated to version 1.4.7 for compatibility with the updated freerdp.

Record
MGASA-2020-0297
Updated
2026-11-02
OSVopenSUSE-SU-2020:1090-1 No score

Security update for freerdp

This update for freerdp fixes the following issues:

frerdp was updated to version 2.1.2 (bsc#1171441,bsc#1173247 and jsc#ECO-2006):

  • CVE-2020-11017: Fixed a double free which could have denied the server's service.
  • CVE-2020-11018: Fixed an out of bounds read which a malicious clients could have triggered.
  • CVE-2020-11019: Fixed an issue which could have led to denial of service if logger was set to 'WLOG_TRACE'.
  • CVE-2020-11038: Fixed a buffer overflow when /video redirection was used.
  • CVE-2020-11039: Fixed an issue which could have allowed arbitrary memory read and write when USB redirection was enabled.
  • CVE-2020-11040: Fixed an out of bounds data read in clear_decompress_subcode_rlex.
  • CVE-2020-11041: Fixed an issue with the configuration for sound backend which could have led to server's denial of service.
  • CVE-2020-11043: Fixed an out of bounds read in rfx_process_message_tileset.
  • CVE-2020-11085: Fixed an out of bounds read in cliprdr_read_format_list.
  • CVE-2020-11086: Fixed an out of bounds read in ntlm_read_ntlm_v2_client_challenge.
  • CVE-2020-11087: Fixed an out of bounds read in ntlm_read_AuthenticateMessage.
  • CVE-2020-11088: Fixed an out of bounds read in ntlm_read_NegotiateMessage.
  • CVE-2020-11089: Fixed an out of bounds read in irp function family.
  • CVE-2020-11095: Fixed a global out of bounds read in update_recv_primary_order.
  • CVE-2020-11096: Fixed a global out of bounds read in update_read_cache_bitmap_v3_order.
  • CVE-2020-11097: Fixed an out of bounds read in ntlm_av_pair_get.
  • CVE-2020-11098: Fixed an out of bounds read in glyph_cache_put.
  • CVE-2020-11099: Fixed an out of bounds Read in license_read_new_or_upgrade_license_packet.
  • CVE-2020-11521: Fixed an out of bounds write in planar.c (bsc#1171443).
  • CVE-2020-11522: Fixed an out of bounds read in gdi.c (bsc#1171444).
  • CVE-2020-11523: Fixed an integer overflow in region.c (bsc#1171445).
  • CVE-2020-11524: Fixed an out of bounds write in interleaved.c (bsc#1171446).
  • CVE-2020-11525: Fixed an out of bounds read in bitmap.c (bsc#1171447).
  • CVE-2020-11526: Fixed an out of bounds read in update_recv_secondary_order (bsc#1171674).
  • CVE-2020-13396: Fixed an Read in ntlm_read_ChallengeMessage.
  • CVE-2020-13397: Fixed an out of bounds read in security_fips_decrypt due to uninitialized value.
  • CVE-2020-13398: Fixed an out of bounds write in crypto_rsa_common.
  • CVE-2020-4030: Fixed an out of bounds read in TrioParse.
  • CVE-2020-4031: Fixed a use after free in gdi_SelectObject.
  • CVE-2020-4032: Fixed an integer casting in update_recv_secondary_order.
  • CVE-2020-4033: Fixed an out of bound read in RLEDECOMPRESS.
  • Fixed an issue where freerdp failed with -fno-common (bsc#1169748).
  • Fixed an issue where USB redirection with FreeRDP was not working (bsc#1169679).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Record
openSUSE-SU-2020:1090-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10768-1 No score

freerdp-2.4.0-2.1 on GA media

These are all security issues fixed in the freerdp-2.4.0-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10768-1
Updated
2026-11-02
OSVSUSE-SU-2020:2032-1 No score

Security update for freerdp

This update for freerdp fixes the following issues:

frerdp was updated to version 2.1.2 (bsc#1171441,bsc#1173247 and jsc#ECO-2006):

  • CVE-2020-11017: Fixed a double free which could have denied the server's service.
  • CVE-2020-11018: Fixed an out of bounds read which a malicious clients could have triggered.
  • CVE-2020-11019: Fixed an issue which could have led to denial of service if logger was set to 'WLOG_TRACE'.
  • CVE-2020-11038: Fixed a buffer overflow when /video redirection was used.
  • CVE-2020-11039: Fixed an issue which could have allowed arbitrary memory read and write when USB redirection was enabled.
  • CVE-2020-11040: Fixed an out of bounds data read in clear_decompress_subcode_rlex.
  • CVE-2020-11041: Fixed an issue with the configuration for sound backend which could have led to server's denial of service.
  • CVE-2020-11043: Fixed an out of bounds read in rfx_process_message_tileset.
  • CVE-2020-11085: Fixed an out of bounds read in cliprdr_read_format_list.
  • CVE-2020-11086: Fixed an out of bounds read in ntlm_read_ntlm_v2_client_challenge.
  • CVE-2020-11087: Fixed an out of bounds read in ntlm_read_AuthenticateMessage.
  • CVE-2020-11088: Fixed an out of bounds read in ntlm_read_NegotiateMessage.
  • CVE-2020-11089: Fixed an out of bounds read in irp function family.
  • CVE-2020-11095: Fixed a global out of bounds read in update_recv_primary_order.
  • CVE-2020-11096: Fixed a global out of bounds read in update_read_cache_bitmap_v3_order.
  • CVE-2020-11097: Fixed an out of bounds read in ntlm_av_pair_get.
  • CVE-2020-11098: Fixed an out of bounds read in glyph_cache_put.
  • CVE-2020-11099: Fixed an out of bounds Read in license_read_new_or_upgrade_license_packet.
  • CVE-2020-11521: Fixed an out of bounds write in planar.c (bsc#1171443).
  • CVE-2020-11522: Fixed an out of bounds read in gdi.c (bsc#1171444).
  • CVE-2020-11523: Fixed an integer overflow in region.c (bsc#1171445).
  • CVE-2020-11524: Fixed an out of bounds write in interleaved.c (bsc#1171446).
  • CVE-2020-11525: Fixed an out of bounds read in bitmap.c (bsc#1171447).
  • CVE-2020-11526: Fixed an out of bounds read in update_recv_secondary_order (bsc#1171674).
  • CVE-2020-13396: Fixed an Read in ntlm_read_ChallengeMessage.
  • CVE-2020-13397: Fixed an out of bounds read in security_fips_decrypt due to uninitialized value.
  • CVE-2020-13398: Fixed an out of bounds write in crypto_rsa_common.
  • CVE-2020-4030: Fixed an out of bounds read in TrioParse.
  • CVE-2020-4031: Fixed a use after free in gdi_SelectObject.
  • CVE-2020-4032: Fixed an integer casting in update_recv_secondary_order.
  • CVE-2020-4033: Fixed an out of bound read in RLEDECOMPRESS.
  • Fixed an issue where freerdp failed with -fno-common (bsc#1169748).
  • Fixed an issue where USB redirection with FreeRDP was not working (bsc#1169679).
Record
SUSE-SU-2020:2032-1
Updated
2026-11-02
OSVSUSE-SU-2020:2068-1 No score

Security update for freerdp

This update for freerdp fixes the following issues:

frerdp was updated to version 2.1.2 (bsc#1171441,bsc#1173247 and jsc#ECO-2006):

  • CVE-2020-11017: Fixed a double free which could have denied the server's service.
  • CVE-2020-11018: Fixed an out of bounds read which a malicious clients could have triggered.
  • CVE-2020-11019: Fixed an issue which could have led to denial of service if logger was set to 'WLOG_TRACE'.
  • CVE-2020-11038: Fixed a buffer overflow when /video redirection was used.
  • CVE-2020-11039: Fixed an issue which could have allowed arbitrary memory read and write when USB redirection was enabled.
  • CVE-2020-11040: Fixed an out of bounds data read in clear_decompress_subcode_rlex.
  • CVE-2020-11041: Fixed an issue with the configuration for sound backend which could have led to server's denial of service.
  • CVE-2020-11043: Fixed an out of bounds read in rfx_process_message_tileset.
  • CVE-2020-11085: Fixed an out of bounds read in cliprdr_read_format_list.
  • CVE-2020-11086: Fixed an out of bounds read in ntlm_read_ntlm_v2_client_challenge.
  • CVE-2020-11087: Fixed an out of bounds read in ntlm_read_AuthenticateMessage.
  • CVE-2020-11088: Fixed an out of bounds read in ntlm_read_NegotiateMessage.
  • CVE-2020-11089: Fixed an out of bounds read in irp function family.
  • CVE-2020-11095: Fixed a global out of bounds read in update_recv_primary_order.
  • CVE-2020-11096: Fixed a global out of bounds read in update_read_cache_bitmap_v3_order.
  • CVE-2020-11097: Fixed an out of bounds read in ntlm_av_pair_get.
  • CVE-2020-11098: Fixed an out of bounds read in glyph_cache_put.
  • CVE-2020-11099: Fixed an out of bounds Read in license_read_new_or_upgrade_license_packet.
  • CVE-2020-11521: Fixed an out of bounds write in planar.c (bsc#1171443).
  • CVE-2020-11522: Fixed an out of bounds read in gdi.c (bsc#1171444).
  • CVE-2020-11523: Fixed an integer overflow in region.c (bsc#1171445).
  • CVE-2020-11524: Fixed an out of bounds write in interleaved.c (bsc#1171446).
  • CVE-2020-11525: Fixed an out of bounds read in bitmap.c (bsc#1171447).
  • CVE-2020-11526: Fixed an out of bounds read in update_recv_secondary_order (bsc#1171674).
  • CVE-2020-13396: Fixed an Read in ntlm_read_ChallengeMessage.
  • CVE-2020-13397: Fixed an out of bounds read in security_fips_decrypt due to uninitialized value.
  • CVE-2020-13398: Fixed an out of bounds write in crypto_rsa_common.
  • CVE-2020-4030: Fixed an out of bounds read in TrioParse.
  • CVE-2020-4031: Fixed a use after free in gdi_SelectObject.
  • CVE-2020-4032: Fixed an integer casting in update_recv_secondary_order.
  • CVE-2020-4033: Fixed an out of bound read in RLEDECOMPRESS.
  • Fixed an issue where freerdp failed with -fno-common (bsc#1169748).
  • Fixed an issue where USB redirection with FreeRDP was not working (bsc#1169679).
Record
SUSE-SU-2020:2068-1
Updated
2026-11-02
OSVSUSE-SU-2020:2272-1 No score

Security update for freerdp

This update for freerdp fixes the following issues:

freerdp was updated to version 2.1.2 (bsc#1171441,bsc#1173247 and jsc#ECO-2006):

  • CVE-2020-11017: Fixed a double free which could have denied the server's service.
  • CVE-2020-11018: Fixed an out of bounds read which a malicious clients could have triggered.
  • CVE-2020-11019: Fixed an issue which could have led to denial of service if logger was set to 'WLOG_TRACE'.
  • CVE-2020-11038: Fixed a buffer overflow when /video redirection was used.
  • CVE-2020-11039: Fixed an issue which could have allowed arbitrary memory read and write when USB redirection was enabled.
  • CVE-2020-11040: Fixed an out of bounds data read in clear_decompress_subcode_rlex.
  • CVE-2020-11041: Fixed an issue with the configuration for sound backend which could have led to server's denial of service.
  • CVE-2020-11043: Fixed an out of bounds read in rfx_process_message_tileset.
  • CVE-2020-11085: Fixed an out of bounds read in cliprdr_read_format_list.
  • CVE-2020-11086: Fixed an out of bounds read in ntlm_read_ntlm_v2_client_challenge.
  • CVE-2020-11087: Fixed an out of bounds read in ntlm_read_AuthenticateMessage.
  • CVE-2020-11088: Fixed an out of bounds read in ntlm_read_NegotiateMessage.
  • CVE-2020-11089: Fixed an out of bounds read in irp function family.
  • CVE-2020-11095: Fixed a global out of bounds read in update_recv_primary_order.
  • CVE-2020-11096: Fixed a global out of bounds read in update_read_cache_bitmap_v3_order.
  • CVE-2020-11097: Fixed an out of bounds read in ntlm_av_pair_get.
  • CVE-2020-11098: Fixed an out of bounds read in glyph_cache_put.
  • CVE-2020-11099: Fixed an out of bounds Read in license_read_new_or_upgrade_license_packet.
  • CVE-2020-11521: Fixed an out of bounds write in planar.c (bsc#1171443).
  • CVE-2020-11522: Fixed an out of bounds read in gdi.c (bsc#1171444).
  • CVE-2020-11523: Fixed an integer overflow in region.c (bsc#1171445).
  • CVE-2020-11524: Fixed an out of bounds write in interleaved.c (bsc#1171446).
  • CVE-2020-11525: Fixed an out of bounds read in bitmap.c (bsc#1171447).
  • CVE-2020-11526: Fixed an out of bounds read in update_recv_secondary_order (bsc#1171674).
  • CVE-2020-13396: Fixed an Read in ntlm_read_ChallengeMessage.
  • CVE-2020-13397: Fixed an out of bounds read in security_fips_decrypt due to uninitialized value.
  • CVE-2020-13398: Fixed an out of bounds write in crypto_rsa_common.
  • CVE-2020-4030: Fixed an out of bounds read in TrioParse.
  • CVE-2020-4031: Fixed a use after free in gdi_SelectObject.
  • CVE-2020-4032: Fixed an integer casting in update_recv_secondary_order.
  • CVE-2020-4033: Fixed an out of bound read in RLEDECOMPRESS.
  • Fixed an issue where freerdp failed with -fno-common (bsc#1169748).
  • Fixed an issue where USB redirection with FreeRDP was not working (bsc#1169679).
  • Fixed an issue where freerdp could not start (bsc#1129193).
  • Fixed an issue where copy and paste between remote host was transforming text to chinese (bsc#1004108).
  • Added pulse support (bsc#1090677).

Additionally, the following issue was fixed:

  • CVE-2020-15103: Fix integer overflow due to missing input sanitation in rdpegfx channel (bsc#1174321).
Record
SUSE-SU-2020:2272-1
Updated
2026-11-02
OSVUSN-4379-1 No score

freerdp2 vulnerabilities

It was discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly exeucte arbitrary code.

Record
USN-4379-1
Updated
2026-11-02
OSVUSN-4382-1 No score

freerdp vulnerabilities

It was discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code.

Record
USN-4382-1
Updated
2026-11-02
OSVUSN-4382-2 No score

freerdp vulnerabilities

It was discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code.

Record
USN-4382-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
freerdp
Alpine:v3.11
 before 2.0.0-r0
2.0.0-r0
freerdp
Alpine:v3.12
 before 2.0.0-r0
2.0.0-r0
freerdp
Alpine:v3.13
 before 2.0.0-r0
2.0.0-r0
freerdp
Alpine:v3.14
 before 2.0.0-r0
2.0.0-r0
freerdp
Alpine:v3.15
 before 2.0.0-r0
2.0.0-r0
freerdp
Alpine:v3.16
 before 2.0.0-r0
2.0.0-r0
freerdp
Alpine:v3.17
 before 2.0.0-r0
2.0.0-r0
freerdp
Alpine:v3.18
 before 2.0.0-r0
2.0.0-r0
freerdp
Alpine:v3.19
 before 2.0.0-r0
2.0.0-r0
freerdp
Alpine:v3.20
 before 2.0.0-r0
2.0.0-r0
Show 82 moreShow less
Affected packages
PackageAffectedFixed
freerdp
Alpine:v3.21
 before 2.0.0-r0
2.0.0-r0
freerdp
Alpine:v3.22
 before 2.0.0-r0
2.0.0-r0
freerdp
Alpine:v3.23
 before 2.0.0-r0
2.0.0-r0
freerdp
Alpine:v3.24
 before 2.0.0-r0
2.0.0-r0
freerdp2
Alpine:v3.22
 before 2.0.0-r0
2.0.0-r0
freerdp2
Alpine:v3.23
 before 2.0.0-r0
2.0.0-r0
freerdp2
Alpine:v3.24
 before 2.0.0-r0
2.0.0-r0
freerdp2
Debian:12
 before 2.1.1+dfsg1-1
2.1.1+dfsg1-1
freerdp
Debian:9
From an advisory covering 14 CVEs
 before 1.1.0~git20140921.1.440916e+dfsg1-13+deb9u4, plus listed versions
1.1.0~git20140921.1.440916e+dfsg1-131.1.0~git20140921.1.440916e+dfsg1-13+deb9u11.1.0~git20140921.1.440916e+dfsg1-13+deb9u21.1.0~git20140921.1.440916e+dfsg1-13+deb9u3
1.1.0~git20140921.1.440916e+dfsg1-13+deb9u4
freerdp
Mageia:7
From an advisory covering 39 CVEs
 before 2.1.2-1.mga7
2.1.2-1.mga7
remmina
Mageia:7
From an advisory covering 39 CVEs
 before 1.4.7-1.mga7
1.4.7-1.mga7
freerdp
openEuler:20.03-LTS
From an advisory covering 11 CVEs
 before 2.2.0-2.oe1
2.2.0-2.oe1
freerdp
openEuler:20.03-LTS-SP1
From an advisory covering 11 CVEs
 before 2.2.0-2.oe1
2.2.0-2.oe1
freerdp
openEuler:20.03-LTS
 before 2.2.0-2.oe1
2.2.0-2.oe1
freerdp
openEuler:20.03-LTS-SP1
 before 2.2.0-2.oe1
2.2.0-2.oe1
freerdp
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
 before 0:2.0.0-4.rc4.el7_8
0:2.0.0-4.rc4.el7_8
freerdp-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
 before 0:2.0.0-4.rc4.el7_8
0:2.0.0-4.rc4.el7_8
freerdp-libs
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
 before 0:2.0.0-4.rc4.el7_8
0:2.0.0-4.rc4.el7_8
libwinpr
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
 before 0:2.0.0-4.rc4.el7_8
0:2.0.0-4.rc4.el7_8
freerdp-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
 before 0:2.0.0-4.rc4.el7_8
0:2.0.0-4.rc4.el7_8
libwinpr-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 3 CVEs
 before 0:2.0.0-4.rc4.el7_8
0:2.0.0-4.rc4.el7_8
freerdp
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 0:2.0.0-4.rc4.el7_8
0:2.0.0-4.rc4.el7_8
freerdp-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 0:2.0.0-4.rc4.el7_8
0:2.0.0-4.rc4.el7_8
freerdp-libs
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 0:2.0.0-4.rc4.el7_8
0:2.0.0-4.rc4.el7_8
libwinpr
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 0:2.0.0-4.rc4.el7_8
0:2.0.0-4.rc4.el7_8
freerdp-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 0:2.0.0-4.rc4.el7_8
0:2.0.0-4.rc4.el7_8
libwinpr-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 0:2.0.0-4.rc4.el7_8
0:2.0.0-4.rc4.el7_8
freerdp
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 0:2.0.0-4.rc4.el7_8
0:2.0.0-4.rc4.el7_8
freerdp-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 0:2.0.0-4.rc4.el7_8
0:2.0.0-4.rc4.el7_8
freerdp-libs
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 0:2.0.0-4.rc4.el7_8
0:2.0.0-4.rc4.el7_8
libwinpr
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 0:2.0.0-4.rc4.el7_8
0:2.0.0-4.rc4.el7_8
freerdp-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 0:2.0.0-4.rc4.el7_8
0:2.0.0-4.rc4.el7_8
libwinpr-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 0:2.0.0-4.rc4.el7_8
0:2.0.0-4.rc4.el7_8
freerdp
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_0.1
2:2.0.0-46.rc4.el8_0.1
freerdp-debuginfo
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_0.1
2:2.0.0-46.rc4.el8_0.1
freerdp-debugsource
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_0.1
2:2.0.0-46.rc4.el8_0.1
freerdp-libs
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_0.1
2:2.0.0-46.rc4.el8_0.1
freerdp-libs-debuginfo
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_0.1
2:2.0.0-46.rc4.el8_0.1
libwinpr
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_0.1
2:2.0.0-46.rc4.el8_0.1
libwinpr-debuginfo
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_0.1
2:2.0.0-46.rc4.el8_0.1
libwinpr-devel
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_0.1
2:2.0.0-46.rc4.el8_0.1
freerdp
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_2.1
2:2.0.0-46.rc4.el8_2.1
freerdp-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_2.1
2:2.0.0-46.rc4.el8_2.1
freerdp-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_2.1
2:2.0.0-46.rc4.el8_2.1
freerdp-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_2.1
2:2.0.0-46.rc4.el8_2.1
freerdp-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_2.1
2:2.0.0-46.rc4.el8_2.1
libwinpr
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_2.1
2:2.0.0-46.rc4.el8_2.1
libwinpr-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_2.1
2:2.0.0-46.rc4.el8_2.1
libwinpr-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_2.1
2:2.0.0-46.rc4.el8_2.1
freerdp-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_2.1
2:2.0.0-46.rc4.el8_2.1
freerdp-debugsource
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_2.1
2:2.0.0-46.rc4.el8_2.1
freerdp-devel
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_2.1
2:2.0.0-46.rc4.el8_2.1
freerdp-libs-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_2.1
2:2.0.0-46.rc4.el8_2.1
libwinpr-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_2.1
2:2.0.0-46.rc4.el8_2.1
freerdp
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_1.1
2:2.0.0-46.rc4.el8_1.1
freerdp-debuginfo
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_1.1
2:2.0.0-46.rc4.el8_1.1
freerdp-debugsource
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_1.1
2:2.0.0-46.rc4.el8_1.1
freerdp-libs
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_1.1
2:2.0.0-46.rc4.el8_1.1
freerdp-libs-debuginfo
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_1.1
2:2.0.0-46.rc4.el8_1.1
libwinpr
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_1.1
2:2.0.0-46.rc4.el8_1.1
libwinpr-debuginfo
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_1.1
2:2.0.0-46.rc4.el8_1.1
libwinpr-devel
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_1.1
2:2.0.0-46.rc4.el8_1.1
freerdp-debuginfo
Red Hat:rhel_eus:8.1::crb
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_1.1
2:2.0.0-46.rc4.el8_1.1
freerdp-debugsource
Red Hat:rhel_eus:8.1::crb
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_1.1
2:2.0.0-46.rc4.el8_1.1
freerdp-devel
Red Hat:rhel_eus:8.1::crb
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_1.1
2:2.0.0-46.rc4.el8_1.1
freerdp-libs-debuginfo
Red Hat:rhel_eus:8.1::crb
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_1.1
2:2.0.0-46.rc4.el8_1.1
libwinpr-debuginfo
Red Hat:rhel_eus:8.1::crb
From an advisory covering 3 CVEs
 before 2:2.0.0-46.rc4.el8_1.1
2:2.0.0-46.rc4.el8_1.1
freerdp
SUSE:Linux Enterprise Workstation Extension 15 SP1
From an advisory covering 31 CVEs
 before 2.1.2-10.15.1
2.1.2-10.15.1
freerdp
SUSE:Linux Enterprise Workstation Extension 15 SP2
From an advisory covering 31 CVEs
 before 2.1.2-15.7.1
2.1.2-15.7.1
freerdp
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 46 CVEs
 before 2.1.2-12.20.1
2.1.2-12.20.1
freerdp
SUSE:Linux Enterprise Workstation Extension 12 SP5
From an advisory covering 46 CVEs
 before 2.1.2-12.20.1
2.1.2-12.20.1
vinagre
SUSE:Linux Enterprise Workstation Extension 12 SP5
From an advisory covering 46 CVEs
 before 3.20.2-16.3.3
3.20.2-16.3.3
freerdp
Ubuntu:16.04:LTS
 before 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4, plus listed versions
1.1.0~git20140921.1.440916e+dfsg1-5ubuntu11.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.21.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.3
1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4
freerdp
Ubuntu:18.04:LTS
 before 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2, plus listed versions
1.1.0~git20140921.1.440916e+dfsg1-15ubuntu11.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1
1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2
freerdp2
Ubuntu:18.04:LTS
 before 2.1.1+dfsg1-0ubuntu0.18.04.1, plus listed versions
2.0.0~git20170725.1.1648deb+dfsg1-12.0.0~git20170725.1.1648deb+dfsg1-52.0.0~git20170725.1.1648deb+dfsg1-5ubuntu12.0.0~git20170725.1.1648deb+dfsg1-5ubuntu22.0.0~git20170725.1.1648deb+dfsg1-62.0.0~git20170725.1.1648deb+dfsg1-6build12.0.0~git20170725.1.1648deb+dfsg1-72.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1
2.1.1+dfsg1-0ubuntu0.18.04.1
freerdp2
Ubuntu:20.04:LTS
 before 2.1.1+dfsg1-0ubuntu0.20.04.1, plus listed versions
2.0.0~git20190204.1.2693389a+dfsg1-12.0.0~git20190204.1.2693389a+dfsg1-22.0.0~git20190204.1.2693389a+dfsg1-2build12.0.0~git20190204.1.2693389a+dfsg1-2build2
2.1.1+dfsg1-0ubuntu0.20.04.1
freerdp2
Ubuntu:18.04:LTS
From an advisory covering 19 CVEs
 before 2.1.1+dfsg1-0ubuntu0.18.04.1, plus listed versions
2.0.0~git20170725.1.1648deb+dfsg1-12.0.0~git20170725.1.1648deb+dfsg1-52.0.0~git20170725.1.1648deb+dfsg1-5ubuntu12.0.0~git20170725.1.1648deb+dfsg1-5ubuntu22.0.0~git20170725.1.1648deb+dfsg1-62.0.0~git20170725.1.1648deb+dfsg1-6build12.0.0~git20170725.1.1648deb+dfsg1-72.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1
2.1.1+dfsg1-0ubuntu0.18.04.1
freerdp2
Ubuntu:20.04:LTS
From an advisory covering 19 CVEs
 before 2.1.1+dfsg1-0ubuntu0.20.04.1, plus listed versions
2.0.0~git20190204.1.2693389a+dfsg1-12.0.0~git20190204.1.2693389a+dfsg1-22.0.0~git20190204.1.2693389a+dfsg1-2build12.0.0~git20190204.1.2693389a+dfsg1-2build2
2.1.1+dfsg1-0ubuntu0.20.04.1
freerdp
Ubuntu:16.04:LTS
From an advisory covering 14 CVEs
 before 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4, plus listed versions
1.1.0~git20140921.1.440916e+dfsg1-5ubuntu11.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.21.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.3
1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4
freerdp
Ubuntu:18.04:LTS
From an advisory covering 13 CVEs
 before 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2, plus listed versions
1.1.0~git20140921.1.440916e+dfsg1-15ubuntu11.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1
1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2
freerdp
openSUSE:Leap 15.1
From an advisory covering 31 CVEs
 before 2.1.2-lp151.5.6.1
2.1.2-lp151.5.6.1
freerdp2
openSUSE:Tumbleweed
From an advisory covering 42 CVEs
 before 2.4.0-2.1
2.4.0-2.1

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-11523 is a medium vulnerability (CVSS 6.6) in Freerdp, published May 15, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.99%, the 80th percentile. Fixed in freerdp 2.0.0-r0.

References

Show 182 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open