CVE-2020-11018CWE-125

Out of bound read in cliprdr_server_receive_capabilities in FreeRDP

Medium · published May 29, 2020

CVSS v3.1
6.5
EPSS
2%
Percentile
79.5
In the wild
Unconfirmed
What it is

In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. This has been fixed in 2.1.0.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01896 · 79.5th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2020-05-29T00:00Z
EPSS history
Timeline
  • 29 MAY 00:00Z
    Out of bound read in cliprdr_server_receive_capabilities in FreeRDP
    cvelistv5