CVE-2020-4030
OOB read in `TrioParse` in FreeRDP
- State
- Published
- Severity
- 3.5 Low
- Published
- Jun 22, 2020
- Updated
- Aug 4, 2024
- Reserved
- Dec 30, 2019
Description
In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks due to an integer overflow. This is fixed in version 2.1.2.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 3.5 Low | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N | GitHub_M |
Weaknesses
- CWE-125 Out-of-bounds Read
Affected Products
| Product | Versions |
|---|---|
FreeRDPFreeRDP |
|
References
- http://www.freerdp.com/2020/06/22/2_1_2-released
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-fjr5-97f5-qq98
- https://github.com/FreeRDP/FreeRDP/commit/05cd9ea2290d23931f615c1b004d4b2e69074e27
- openSUSE-SU-2020:1090vendor-advisory
- FEDORA-2020-8d5f86e29avendor-advisory
- FEDORA-2020-a3432485dbvendor-advisory
- USN-4481-1vendor-advisory
- [debian-lts-announce] 20231007 [SECURITY] [DLA 3606-1] freerdp2 security updatemailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.