CVEDB API

In FreeRDP after 1.0 and before 2.0.0, there is a stream out-of-bounds seek in update_read_synchronize that could lead to a later out-of-bounds read.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 27.5%

CVSS Severity

CVSS v3 Score 5.5

CVSS v2 Score 3.5

References

Products affected by CVE-2020-11046

Freerdp » Freerdp » Version: 1.0.1

cpe:2.3:a:freerdp:freerdp:1.0.1
Freerdp » Freerdp » Version: 1.0.2

cpe:2.3:a:freerdp:freerdp:1.0.2
Freerdp » Freerdp » Version: 1.1.0

cpe:2.3:a:freerdp:freerdp:1.1.0
Freerdp » Freerdp » Version: 1.2.0

cpe:2.3:a:freerdp:freerdp:1.2.0
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04
Canonical » Ubuntu Linux » Version: 19.10

cpe:2.3:o:canonical:ubuntu_linux:19.10
Canonical » Ubuntu Linux » Version: 20.04

cpe:2.3:o:canonical:ubuntu_linux:20.04
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0