{"id":"CVE-2020-11523","aliases":["ALPINE-CVE-2020-11523","DEBIAN-CVE-2020-11523","DLA-2356-1","EUVD-2020-3876","GHSA-4qrh-8cp8-4x42","MGASA-2020-0297","OESA-2021-1008","OESA-2021-1085","RHSA-2020:2334","RHSA-2020:2335","RHSA-2020:2336","RHSA-2020:2354","SUSE-SU-2020:2032-1","SUSE-SU-2020:2068-1","SUSE-SU-2020:2272-1","UBUNTU-CVE-2020-11523","USN-4379-1","USN-4382-1","USN-4382-2","openSUSE-SU-2020:1090-1","openSUSE-SU-2024:10768-1"],"status":"published","title":"freerdp - security update","description":"libfreerdp/gdi/region.c in FreeRDP versions \u003e 1.0 through 2.0.0-rc4 has an Integer Overflow.","severity":{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01995,"percentile":0.80876,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2020-05-15T16:12:56Z","modified":"2026-11-03T06:32:30Z","fixes":[{"ecosystem":"Alpine:v3.11","package":"freerdp","fixed_in":["2.0.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"freerdp","fixed_in":["2.0.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"freerdp","fixed_in":["2.0.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"freerdp","fixed_in":["2.0.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"freerdp","fixed_in":["2.0.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"freerdp","fixed_in":["2.0.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"freerdp","fixed_in":["2.0.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"freerdp","fixed_in":["2.0.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"freerdp","fixed_in":["2.0.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"freerdp","fixed_in":["2.0.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"freerdp","fixed_in":["2.0.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"freerdp","fixed_in":["2.0.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"freerdp","fixed_in":["2.0.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"freerdp","fixed_in":["2.0.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"freerdp2","fixed_in":["2.0.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"freerdp2","fixed_in":["2.0.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"freerdp2","fixed_in":["2.0.0-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"freerdp2","fixed_in":["2.1.1+dfsg1-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS","package":"freerdp","fixed_in":["2.2.0-2.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"freerdp","fixed_in":["2.2.0-2.oe1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"freerdp","fixed_in":["1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"freerdp","fixed_in":["1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"freerdp2","fixed_in":["2.1.1+dfsg1-0ubuntu0.18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"freerdp2","fixed_in":["2.1.1+dfsg1-0ubuntu0.20.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.11","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0~git20140921.1.440916e+dfsg1-13+deb9u4"}]}],"versions":["1.1.0~git20140921.1.440916e+dfsg1-13","1.1.0~git20140921.1.440916e+dfsg1-13+deb9u1","1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2","1.1.0~git20140921.1.440916e+dfsg1-13+deb9u3"],"bundled":14},{"source":"osv","ecosystem":"Mageia:7","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-1.mga7"}]}],"bundled":39},{"source":"osv","ecosystem":"Mageia:7","package":"remmina","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.7-1.mga7"}]}],"bundled":39},{"source":"osv","ecosystem":"openEuler:20.03-LTS","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-2.oe1"}]}],"bundled":11},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-2.oe1"}]}],"bundled":11},{"source":"osv","ecosystem":"openEuler:20.03-LTS","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-2.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-4.rc4.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-4.rc4.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"freerdp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-4.rc4.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libwinpr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-4.rc4.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"freerdp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-4.rc4.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libwinpr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-4.rc4.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-4.rc4.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-4.rc4.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"freerdp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-4.rc4.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libwinpr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-4.rc4.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"freerdp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-4.rc4.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libwinpr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-4.rc4.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-4.rc4.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-4.rc4.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"freerdp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-4.rc4.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libwinpr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-4.rc4.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"freerdp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-4.rc4.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libwinpr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-4.rc4.el7_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"freerdp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"freerdp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"freerdp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"libwinpr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"libwinpr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"libwinpr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"freerdp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"freerdp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"freerdp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libwinpr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libwinpr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libwinpr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"freerdp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"freerdp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"freerdp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libwinpr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"freerdp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"freerdp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"freerdp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libwinpr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libwinpr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libwinpr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::crb","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::crb","package":"freerdp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::crb","package":"freerdp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::crb","package":"freerdp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::crb","package":"libwinpr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP1","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-10.15.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP2","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-15.7.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-12.20.1"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-12.20.1"}]}],"bundled":46},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"vinagre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.2-16.3.3"}]}],"bundled":46},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"}]}],"versions":["1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1","1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2","1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"}]}],"versions":["1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1","1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1+dfsg1-0ubuntu0.18.04.1"}]}],"versions":["2.0.0~git20170725.1.1648deb+dfsg1-1","2.0.0~git20170725.1.1648deb+dfsg1-5","2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu1","2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu2","2.0.0~git20170725.1.1648deb+dfsg1-6","2.0.0~git20170725.1.1648deb+dfsg1-6build1","2.0.0~git20170725.1.1648deb+dfsg1-7","2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1+dfsg1-0ubuntu0.20.04.1"}]}],"versions":["2.0.0~git20190204.1.2693389a+dfsg1-1","2.0.0~git20190204.1.2693389a+dfsg1-2","2.0.0~git20190204.1.2693389a+dfsg1-2build1","2.0.0~git20190204.1.2693389a+dfsg1-2build2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1+dfsg1-0ubuntu0.18.04.1"}]}],"versions":["2.0.0~git20170725.1.1648deb+dfsg1-1","2.0.0~git20170725.1.1648deb+dfsg1-5","2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu1","2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu2","2.0.0~git20170725.1.1648deb+dfsg1-6","2.0.0~git20170725.1.1648deb+dfsg1-6build1","2.0.0~git20170725.1.1648deb+dfsg1-7","2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1"],"bundled":19},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1+dfsg1-0ubuntu0.20.04.1"}]}],"versions":["2.0.0~git20190204.1.2693389a+dfsg1-1","2.0.0~git20190204.1.2693389a+dfsg1-2","2.0.0~git20190204.1.2693389a+dfsg1-2build1","2.0.0~git20190204.1.2693389a+dfsg1-2build2"],"bundled":19},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"}]}],"versions":["1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1","1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2","1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.3"],"bundled":14},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"}]}],"versions":["1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1","1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1"],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-lp151.5.6.1"}]}],"bundled":31},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-2.1"}]}],"bundled":42}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"freerdp","product":"freerdp"},{"vendor":"opensuse","product":"leap"}],"references":[{"url":"https://github.com/FreeRDP/FreeRDP/commits/master","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4qrh-8cp8-4x42","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix","advisory","report"]},{"url":"https://pub.freerdp.com/cve/CVE-2020-11523/pocAnalysis_2.pdf","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Vendor Advisory","evidence","report"]},{"url":"https://usn.ubuntu.com/4379-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4382-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/08/msg00054.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-11523","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-11523","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0297.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26699","tags":["report"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-fjr5-97f5-qq98","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-gwcq-hpq2-m74g","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3898-mc89-x2vc","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-7rhj-856w-82p8","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q5c8-fm29-q57c","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8cvc-vcw7-6mfw","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-wvrr-2f4r-hjvh","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h25x-cqr6-fp6g","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mx9p-f6q8-mqwq","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x4wq-m7c9-rjgr","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-w67c-26c4-2h9w","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9jp6-5vf2-cx2q","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5mr4-28w3-rc84","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cgqh-p732-6x2w","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3x39-248q-f4q6","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9fw6-m2q8-h5pw","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hx48-wmmm-mr5q","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hv8w-f2hx-5gcv","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-wwh7-r2r8-xjpr","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-wjg2-2f82-466g","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2j4w-v45m-95hf","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-fg8v-w34r-c974","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-84vj-g73m-chw7","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xh4f-fh87-43hp","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hfc7-c5gv-8c2h","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-563r-pvh7-4fw2","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mjw7-3mq2-996x","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c8x2-c3c9-9r3f","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jr57-f58x-hjmv","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-977w-866x-4v5h","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5cwc-6wc9-255w","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-48wx-7vgj-fffh","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cgw8-3mp2-p5qw","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9755-fphh-gmjg","tags":["advisory"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-97jw-m5w5-xvf9","tags":["advisory"]},{"url":"https://gitlab.com/Remmina/Remmina/-/releases#v1.4.7","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-4379-1","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/IGSY4CEBOH6TVJLIW53YL7YDGHY3RMPU/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/6RTM4HR3PBFF5X7XHCOS5MIHPKSDEYCX/","tags":["web"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1008","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11526","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11044","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11042","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11095","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11045","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11522","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11524","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11521","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11525","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11523","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17177","tags":["advisory"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1085","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2334","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1836214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1836226","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1836234","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2334.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-11521","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-11521","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-11523","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-11523","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-11524","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-11524","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2335","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2335.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2336","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2336.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2354","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2354.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202032-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1169679","tags":["report"]},{"url":"https://bugzilla.suse.com/1169748","tags":["report"]},{"url":"https://bugzilla.suse.com/1171441","tags":["report"]},{"url":"https://bugzilla.suse.com/1171443","tags":["report"]},{"url":"https://bugzilla.suse.com/1171444","tags":["report"]},{"url":"https://bugzilla.suse.com/1171445","tags":["report"]},{"url":"https://bugzilla.suse.com/1171446","tags":["report"]},{"url":"https://bugzilla.suse.com/1171447","tags":["report"]},{"url":"https://bugzilla.suse.com/1171474","tags":["report"]},{"url":"https://bugzilla.suse.com/1173247","tags":["report"]},{"url":"https://bugzilla.suse.com/1173605","tags":["report"]},{"url":"https://bugzilla.suse.com/1174200","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-4030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-4031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-4032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-4033","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202068-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202272-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1004108","tags":["report"]},{"url":"https://bugzilla.suse.com/1050699","tags":["report"]},{"url":"https://bugzilla.suse.com/1050704","tags":["report"]},{"url":"https://bugzilla.suse.com/1050708","tags":["report"]},{"url":"https://bugzilla.suse.com/1050711","tags":["report"]},{"url":"https://bugzilla.suse.com/1050712","tags":["report"]},{"url":"https://bugzilla.suse.com/1050714","tags":["report"]},{"url":"https://bugzilla.suse.com/1085416","tags":["report"]},{"url":"https://bugzilla.suse.com/1087240","tags":["report"]},{"url":"https://bugzilla.suse.com/1090677","tags":["report"]},{"url":"https://bugzilla.suse.com/1103557","tags":["report"]},{"url":"https://bugzilla.suse.com/1104918","tags":["report"]},{"url":"https://bugzilla.suse.com/1112028","tags":["report"]},{"url":"https://bugzilla.suse.com/1116708","tags":["report"]},{"url":"https://bugzilla.suse.com/1117963","tags":["report"]},{"url":"https://bugzilla.suse.com/1117964","tags":["report"]},{"url":"https://bugzilla.suse.com/1117965","tags":["report"]},{"url":"https://bugzilla.suse.com/1117966","tags":["report"]},{"url":"https://bugzilla.suse.com/1117967","tags":["report"]},{"url":"https://bugzilla.suse.com/1120507","tags":["report"]},{"url":"https://bugzilla.suse.com/1129193","tags":["report"]},{"url":"https://bugzilla.suse.com/1171674","tags":["report"]},{"url":"https://bugzilla.suse.com/1174321","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2837","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2838","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15103","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-11523","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4382-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4382-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-1000852","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17177","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11042","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11044","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11045","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11046","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11047","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11048","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11049","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11058","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11521","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11522","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11524","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11525","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11526","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-13396","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-13397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-13398","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PMFBUGT3IBZIELBHFAWBVPCGUFYQHVRD/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17177","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-11523","description":"libfreerdp/gdi/region.c in FreeRDP versions \u003e 1.0 through 2.0.0-rc4 has an Integer Overflow.","status":"published","published":"2020-05-15T16:12:56Z","modified":"2024-08-04T11:35:12.831Z","updated_at":"2026-11-02T14:35:57.67317Z"}],"euvd":[{"id":"EUVD-2020-3876","description":"libfreerdp/gdi/region.c in FreeRDP versions \u003e 1.0 through 2.0.0-rc4 has an Integer Overflow.","status":"published","published":"2020-05-15T16:12:56Z","modified":"2024-08-04T11:35:12Z","updated_at":"2026-11-03T03:07:46.270701Z"}],"nvd":[{"id":"CVE-2020-11523","description":"libfreerdp/gdi/region.c in FreeRDP versions \u003e 1.0 through 2.0.0-rc4 has an Integer Overflow.","status":"published","published":"2020-05-15T17:15:11.907Z","modified":"2026-06-17T02:50:20.22Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":6,"vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:06:00.784809Z"}],"osv":[{"id":"ALPINE-CVE-2020-11523","description":"libfreerdp/gdi/region.c in FreeRDP versions \u003e 1.0 through 2.0.0-rc4 has an Integer Overflow.","status":"published","published":"2020-05-15T17:15:11.907Z","modified":"2026-11-03T06:32:30.160716307Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T07:17:41.158523Z"},{"id":"CVE-2020-11523","description":"libfreerdp/gdi/region.c in FreeRDP versions \u003e 1.0 through 2.0.0-rc4 has an Integer Overflow.","status":"published","published":"2020-05-15T17:15:11.907Z","modified":"2026-10-20T10:51:45.911100822Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:14.034736Z"},{"id":"DEBIAN-CVE-2020-11523","description":"libfreerdp/gdi/region.c in FreeRDP versions \u003e 1.0 through 2.0.0-rc4 has an Integer Overflow.","status":"published","published":"2020-05-15T17:15:11.907Z","modified":"2026-10-26T12:00:18.850881436Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:32.862554Z"},{"id":"OESA-2021-1008","title":"freerdp security update","description":"FreeRDP is a client implementation of the Remote Desktop Protocol (RDP) that follows Microsoft's open specifications. This package provides the client applications xfreerdp and wlfreerdp.\\r\\n\\r\\n\r\nSecurity Fix(es):\\r\\n\\r\\n\r\nlibfreerdp/core/update.c in FreeRDP versions \u003e 1.1 through 2.0.0-rc4 has an Out-of-bounds Read.(CVE-2020-11526)\\r\\n\\r\\n\r\nIn FreeRDP greater than 1.2 and before 2.0.0, a double free in update_read_cache_bitmap_v3_order crashes the client application if corrupted data from a manipulated server is parsed. This has been patched in 2.0.0.(CVE-2020-11044)\\r\\n\\r\\n\r\nIn FreeRDP greater than 1.1 and before 2.0.0, there is an out-of-bounds read in update_read_icon_info. It allows reading a attacker-defined amount of client memory (32bit unsigned -\u003e 4GB) to an intermediate buffer. This can be used to crash the client or store information for later retrieval. This has been patched in 2.0.0.(CVE-2020-11042)\\r\\n\\r\\n\r\nIn FreeRDP before version 2.1.2, an out of bound reads occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2.(CVE-2020-11095)\\r\\n\\r\\n\r\nIn FreeRDP after 1.0 and before 2.0.0, there is an out-of-bound read in in update_read_bitmap_data that allows client memory to be read to an image buffer. The result displayed on screen as colour.(CVE-2020-11045)\\r\\n\\r\\n\nlibfreerdp/gdi/gdi.c in FreeRDP \u003e 1.0 through 2.0.0-rc4 has an Out-of-bounds Read.(CVE-2020-11522)\\r\\n\\r\\n\nlibfreerdp/codec/interleaved.c in FreeRDP versions \u003e 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.(CVE-2020-11524)\\r\\n\\r\\n\nlibfreerdp/codec/planar.c in FreeRDP version \u003e 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.(CVE-2020-11521)\\r\\n\\r\\n\nlibfreerdp/cache/bitmap.c in FreeRDP versions \u003e 1.0 through 2.0.0-rc4 has an Out of bounds read.(CVE-2020-11525)\\r\\n\\r\\n\nlibfreerdp/codec/planar.c in FreeRDP version \u003e 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.(CVE-2020-11521)\\r\\n\\r\\n\nlibfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied realloc pointer (i.e., the first argument to realloc) is also used for a realloc return value.(CVE-2019-17177)\\r\\n\\r\\n","status":"published","published":"2021-02-04T11:04:14Z","modified":"2026-08-18T01:15:08.893491682Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"OESA-2021-1085","title":"freerdp security update","description":"FreeRDP is a client implementation of the Remote Desktop Protocol (RDP) that follows Microsoft's open specifications. This package provides the client applications xfreerdp and wlfreerdp.\r\n\r\nSecurity Fix(es):\r\n\r\nlibfreerdp/gdi/region.c in FreeRDP versions \u003e 1.0 through 2.0.0-rc4 has an Integer Overflow.(CVE-2020-11523)","status":"published","published":"2021-03-05T11:04:19Z","modified":"2026-08-18T01:15:21.473891252Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2020:2334","title":"Red Hat Security Advisory: freerdp security update","status":"published","published":"2024-09-16T04:18:20Z","modified":"2026-06-26T12:21:11.943663695Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:2335","title":"Red Hat Security Advisory: freerdp security update","status":"published","published":"2024-09-16T04:18:28Z","modified":"2025-11-22T12:02:10Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:2336","title":"Red Hat Security Advisory: freerdp security update","status":"published","published":"2024-09-16T04:18:36Z","modified":"2026-06-26T12:21:11.657650301Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:2354","title":"Red Hat Security Advisory: freerdp security update","status":"published","published":"2024-09-16T04:18:44Z","modified":"2026-06-26T12:21:12.042353149Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"UBUNTU-CVE-2020-11523","description":"libfreerdp/gdi/region.c in FreeRDP versions \u003e 1.0 through 2.0.0-rc4 has an Integer Overflow.","status":"published","published":"2020-05-15T17:15:00Z","modified":"2026-04-22T12:26:51.559938Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:22.212782Z"},{"id":"DLA-2356-1","title":"freerdp - security update","status":"published","published":"2020-08-30T00:00:00Z","modified":"2026-03-09T01:23:13.518227Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"MGASA-2020-0297","title":"Updated freerdp/remmina packages fix security vulnerability","description":"It was discovered that FreeRDP incorrectly handled certain memory\noperations. A remote attacker could use this issue to cause FreeRDP to\ncrash, resulting in a denial of service, or possibly exeucte arbitrary\ncode.\n\nThe freerdp package has been updated to version 2.1.2 to fix these issues.\n\nAlso, the remmina package has been updated to version 1.4.7 for\ncompatibility with the updated freerdp.\n","status":"published","published":"2020-07-31T23:25:42Z","modified":"2026-04-16T04:43:12.257499336Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:1090-1","title":"Security update for freerdp","description":"This update for freerdp fixes the following issues:\n\nfrerdp was updated to version 2.1.2 (bsc#1171441,bsc#1173247 and jsc#ECO-2006):\n\n- CVE-2020-11017: Fixed a double free which could have denied the server's service.\n- CVE-2020-11018: Fixed an out of bounds read which a malicious clients could have triggered.\n- CVE-2020-11019: Fixed an issue which could have led to denial of service if logger was set to 'WLOG_TRACE'.\n- CVE-2020-11038: Fixed a buffer overflow when /video redirection was used.\n- CVE-2020-11039: Fixed an issue which could have allowed arbitrary memory read and write when USB redirection was enabled.\n- CVE-2020-11040: Fixed an out of bounds data read in clear_decompress_subcode_rlex.\n- CVE-2020-11041: Fixed an issue with the configuration for sound backend which could have led to server's denial of service.\n- CVE-2020-11043: Fixed an out of bounds read in rfx_process_message_tileset.\n- CVE-2020-11085: Fixed an out of bounds read in cliprdr_read_format_list.\n- CVE-2020-11086: Fixed an out of bounds read in ntlm_read_ntlm_v2_client_challenge.\n- CVE-2020-11087: Fixed an out of bounds read in ntlm_read_AuthenticateMessage.\n- CVE-2020-11088: Fixed an out of bounds read in ntlm_read_NegotiateMessage.\n- CVE-2020-11089: Fixed an out of bounds read in irp function family.\n- CVE-2020-11095: Fixed a global out of bounds read in update_recv_primary_order.\n- CVE-2020-11096: Fixed a global out of bounds read in update_read_cache_bitmap_v3_order.\n- CVE-2020-11097: Fixed an out of bounds read in ntlm_av_pair_get.\n- CVE-2020-11098: Fixed an out of bounds read in glyph_cache_put.\n- CVE-2020-11099: Fixed an out of bounds Read in license_read_new_or_upgrade_license_packet.\n- CVE-2020-11521: Fixed an out of bounds write in planar.c (bsc#1171443).\n- CVE-2020-11522: Fixed an out of bounds read in gdi.c (bsc#1171444).\n- CVE-2020-11523: Fixed an integer overflow in region.c (bsc#1171445).\n- CVE-2020-11524: Fixed an out of bounds write in interleaved.c (bsc#1171446).\n- CVE-2020-11525: Fixed an out of bounds read in bitmap.c (bsc#1171447).\n- CVE-2020-11526: Fixed an out of bounds read in update_recv_secondary_order (bsc#1171674).\n- CVE-2020-13396: Fixed an Read in ntlm_read_ChallengeMessage.\n- CVE-2020-13397: Fixed an out of bounds read in security_fips_decrypt due to uninitialized value.\n- CVE-2020-13398: Fixed an out of bounds write in crypto_rsa_common.\n- CVE-2020-4030: Fixed an out of bounds read in `TrioParse`.\n- CVE-2020-4031: Fixed a use after free in gdi_SelectObject.\n- CVE-2020-4032: Fixed an integer casting in `update_recv_secondary_order`.\n- CVE-2020-4033: Fixed an out of bound read in RLEDECOMPRESS.\n- Fixed an issue where freerdp failed with -fno-common (bsc#1169748).\n- Fixed an issue where USB redirection with FreeRDP was not working (bsc#1169679).\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2020-07-26T18:19:38Z","modified":"2026-02-04T03:09:29.858482Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:10768-1","title":"freerdp-2.4.0-2.1 on GA media","description":"These are all security issues fixed in the freerdp-2.4.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:37:35.66086Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2020:2032-1","title":"Security update for freerdp","description":"This update for freerdp fixes the following issues:\n\nfrerdp was updated to version 2.1.2 (bsc#1171441,bsc#1173247 and jsc#ECO-2006):\n\n- CVE-2020-11017: Fixed a double free which could have denied the server's service.\n- CVE-2020-11018: Fixed an out of bounds read which a malicious clients could have triggered.\n- CVE-2020-11019: Fixed an issue which could have led to denial of service if logger was set to 'WLOG_TRACE'.\n- CVE-2020-11038: Fixed a buffer overflow when /video redirection was used.\n- CVE-2020-11039: Fixed an issue which could have allowed arbitrary memory read and write when USB redirection was enabled.\n- CVE-2020-11040: Fixed an out of bounds data read in clear_decompress_subcode_rlex.\n- CVE-2020-11041: Fixed an issue with the configuration for sound backend which could have led to server's denial of service.\n- CVE-2020-11043: Fixed an out of bounds read in rfx_process_message_tileset.\n- CVE-2020-11085: Fixed an out of bounds read in cliprdr_read_format_list.\n- CVE-2020-11086: Fixed an out of bounds read in ntlm_read_ntlm_v2_client_challenge.\n- CVE-2020-11087: Fixed an out of bounds read in ntlm_read_AuthenticateMessage.\n- CVE-2020-11088: Fixed an out of bounds read in ntlm_read_NegotiateMessage.\n- CVE-2020-11089: Fixed an out of bounds read in irp function family.\n- CVE-2020-11095: Fixed a global out of bounds read in update_recv_primary_order.\n- CVE-2020-11096: Fixed a global out of bounds read in update_read_cache_bitmap_v3_order.\n- CVE-2020-11097: Fixed an out of bounds read in ntlm_av_pair_get.\n- CVE-2020-11098: Fixed an out of bounds read in glyph_cache_put.\n- CVE-2020-11099: Fixed an out of bounds Read in license_read_new_or_upgrade_license_packet.\n- CVE-2020-11521: Fixed an out of bounds write in planar.c (bsc#1171443).\n- CVE-2020-11522: Fixed an out of bounds read in gdi.c (bsc#1171444).\n- CVE-2020-11523: Fixed an integer overflow in region.c (bsc#1171445).\n- CVE-2020-11524: Fixed an out of bounds write in interleaved.c (bsc#1171446).\n- CVE-2020-11525: Fixed an out of bounds read in bitmap.c (bsc#1171447).\n- CVE-2020-11526: Fixed an out of bounds read in update_recv_secondary_order (bsc#1171674).\n- CVE-2020-13396: Fixed an Read in ntlm_read_ChallengeMessage.\n- CVE-2020-13397: Fixed an out of bounds read in security_fips_decrypt due to uninitialized value.\n- CVE-2020-13398: Fixed an out of bounds write in crypto_rsa_common.\n- CVE-2020-4030: Fixed an out of bounds read in `TrioParse`.\n- CVE-2020-4031: Fixed a use after free in gdi_SelectObject.\n- CVE-2020-4032: Fixed an integer casting in `update_recv_secondary_order`.\n- CVE-2020-4033: Fixed an out of bound read in RLEDECOMPRESS.\n- Fixed an issue where freerdp failed with -fno-common (bsc#1169748).\n- Fixed an issue where USB redirection with FreeRDP was not working (bsc#1169679).\n","status":"published","published":"2020-07-23T15:37:31Z","modified":"2026-02-04T02:38:23.689672Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:2068-1","title":"Security update for freerdp","description":"This update for freerdp fixes the following issues:\n\nfrerdp was updated to version 2.1.2 (bsc#1171441,bsc#1173247 and jsc#ECO-2006):\n\n- CVE-2020-11017: Fixed a double free which could have denied the server's service.\n- CVE-2020-11018: Fixed an out of bounds read which a malicious clients could have triggered.\n- CVE-2020-11019: Fixed an issue which could have led to denial of service if logger was set to 'WLOG_TRACE'.\n- CVE-2020-11038: Fixed a buffer overflow when /video redirection was used.\n- CVE-2020-11039: Fixed an issue which could have allowed arbitrary memory read and write when USB redirection was enabled.\n- CVE-2020-11040: Fixed an out of bounds data read in clear_decompress_subcode_rlex.\n- CVE-2020-11041: Fixed an issue with the configuration for sound backend which could have led to server's denial of service.\n- CVE-2020-11043: Fixed an out of bounds read in rfx_process_message_tileset.\n- CVE-2020-11085: Fixed an out of bounds read in cliprdr_read_format_list.\n- CVE-2020-11086: Fixed an out of bounds read in ntlm_read_ntlm_v2_client_challenge.\n- CVE-2020-11087: Fixed an out of bounds read in ntlm_read_AuthenticateMessage.\n- CVE-2020-11088: Fixed an out of bounds read in ntlm_read_NegotiateMessage.\n- CVE-2020-11089: Fixed an out of bounds read in irp function family.\n- CVE-2020-11095: Fixed a global out of bounds read in update_recv_primary_order.\n- CVE-2020-11096: Fixed a global out of bounds read in update_read_cache_bitmap_v3_order.\n- CVE-2020-11097: Fixed an out of bounds read in ntlm_av_pair_get.\n- CVE-2020-11098: Fixed an out of bounds read in glyph_cache_put.\n- CVE-2020-11099: Fixed an out of bounds Read in license_read_new_or_upgrade_license_packet.\n- CVE-2020-11521: Fixed an out of bounds write in planar.c (bsc#1171443).\n- CVE-2020-11522: Fixed an out of bounds read in gdi.c (bsc#1171444).\n- CVE-2020-11523: Fixed an integer overflow in region.c (bsc#1171445).\n- CVE-2020-11524: Fixed an out of bounds write in interleaved.c (bsc#1171446).\n- CVE-2020-11525: Fixed an out of bounds read in bitmap.c (bsc#1171447).\n- CVE-2020-11526: Fixed an out of bounds read in update_recv_secondary_order (bsc#1171674).\n- CVE-2020-13396: Fixed an Read in ntlm_read_ChallengeMessage.\n- CVE-2020-13397: Fixed an out of bounds read in security_fips_decrypt due to uninitialized value.\n- CVE-2020-13398: Fixed an out of bounds write in crypto_rsa_common.\n- CVE-2020-4030: Fixed an out of bounds read in `TrioParse`.\n- CVE-2020-4031: Fixed a use after free in gdi_SelectObject.\n- CVE-2020-4032: Fixed an integer casting in `update_recv_secondary_order`.\n- CVE-2020-4033: Fixed an out of bound read in RLEDECOMPRESS.\n- Fixed an issue where freerdp failed with -fno-common (bsc#1169748).\n- Fixed an issue where USB redirection with FreeRDP was not working (bsc#1169679).\n","status":"published","published":"2020-07-29T09:12:47Z","modified":"2026-02-04T03:10:25.137648Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:2272-1","title":"Security update for freerdp","description":"This update for freerdp fixes the following issues:\n\nfreerdp was updated to version 2.1.2 (bsc#1171441,bsc#1173247 and jsc#ECO-2006):\n\n- CVE-2020-11017: Fixed a double free which could have denied the server's service.\n- CVE-2020-11018: Fixed an out of bounds read which a malicious clients could have triggered.\n- CVE-2020-11019: Fixed an issue which could have led to denial of service if logger was set to 'WLOG_TRACE'.\n- CVE-2020-11038: Fixed a buffer overflow when /video redirection was used.\n- CVE-2020-11039: Fixed an issue which could have allowed arbitrary memory read and write when USB redirection was enabled.\n- CVE-2020-11040: Fixed an out of bounds data read in clear_decompress_subcode_rlex.\n- CVE-2020-11041: Fixed an issue with the configuration for sound backend which could have led to server's denial of service.\n- CVE-2020-11043: Fixed an out of bounds read in rfx_process_message_tileset.\n- CVE-2020-11085: Fixed an out of bounds read in cliprdr_read_format_list.\n- CVE-2020-11086: Fixed an out of bounds read in ntlm_read_ntlm_v2_client_challenge.\n- CVE-2020-11087: Fixed an out of bounds read in ntlm_read_AuthenticateMessage.\n- CVE-2020-11088: Fixed an out of bounds read in ntlm_read_NegotiateMessage.\n- CVE-2020-11089: Fixed an out of bounds read in irp function family.\n- CVE-2020-11095: Fixed a global out of bounds read in update_recv_primary_order.\n- CVE-2020-11096: Fixed a global out of bounds read in update_read_cache_bitmap_v3_order.\n- CVE-2020-11097: Fixed an out of bounds read in ntlm_av_pair_get.\n- CVE-2020-11098: Fixed an out of bounds read in glyph_cache_put.\n- CVE-2020-11099: Fixed an out of bounds Read in license_read_new_or_upgrade_license_packet.\n- CVE-2020-11521: Fixed an out of bounds write in planar.c (bsc#1171443).\n- CVE-2020-11522: Fixed an out of bounds read in gdi.c (bsc#1171444).\n- CVE-2020-11523: Fixed an integer overflow in region.c (bsc#1171445).\n- CVE-2020-11524: Fixed an out of bounds write in interleaved.c (bsc#1171446).\n- CVE-2020-11525: Fixed an out of bounds read in bitmap.c (bsc#1171447).\n- CVE-2020-11526: Fixed an out of bounds read in update_recv_secondary_order (bsc#1171674).\n- CVE-2020-13396: Fixed an Read in ntlm_read_ChallengeMessage.\n- CVE-2020-13397: Fixed an out of bounds read in security_fips_decrypt due to uninitialized value.\n- CVE-2020-13398: Fixed an out of bounds write in crypto_rsa_common.\n- CVE-2020-4030: Fixed an out of bounds read in `TrioParse`.\n- CVE-2020-4031: Fixed a use after free in gdi_SelectObject.\n- CVE-2020-4032: Fixed an integer casting in `update_recv_secondary_order`.\n- CVE-2020-4033: Fixed an out of bound read in RLEDECOMPRESS.\n- Fixed an issue where freerdp failed with -fno-common (bsc#1169748).\n- Fixed an issue where USB redirection with FreeRDP was not working (bsc#1169679).\n- Fixed an issue where freerdp could not start (bsc#1129193).\n- Fixed an issue where copy and paste between remote host was transforming text to chinese (bsc#1004108).\n- Added pulse support (bsc#1090677).\n\nAdditionally, the following issue was fixed:\n\n- CVE-2020-15103: Fix integer overflow due to missing input sanitation in rdpegfx channel (bsc#1174321).\n","status":"published","published":"2020-08-18T14:44:51Z","modified":"2026-02-04T02:32:54.178289Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"USN-4379-1","title":"freerdp2 vulnerabilities","description":"It was discovered that FreeRDP incorrectly handled certain memory\noperations. A remote attacker could use this issue to cause FreeRDP to\ncrash, resulting in a denial of service, or possibly exeucte arbitrary\ncode.\n","status":"published","published":"2020-06-01T17:32:46Z","modified":"2026-04-27T15:48:44.623509427Z","updated_at":"2026-11-02T16:58:14.547547Z"},{"id":"USN-4382-1","title":"freerdp vulnerabilities","description":"It was discovered that FreeRDP incorrectly handled certain memory\noperations. A remote attacker could use this issue to cause FreeRDP to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode.\n","status":"published","published":"2020-06-04T11:58:14Z","modified":"2026-04-27T15:48:45.803379271Z","updated_at":"2026-11-02T16:58:14.547547Z"},{"id":"USN-4382-2","title":"freerdp vulnerabilities","description":"It was discovered that FreeRDP incorrectly handled certain memory\noperations. A remote attacker could use this issue to cause FreeRDP to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode.\n","status":"published","published":"2020-11-26T18:47:18Z","modified":"2026-04-22T10:05:52.009965Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}