This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2020-11039 →
DEBIAN-CVE-2020-11039
In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled (nearly) arbitrary memory can be read and written...
Original description
The description as published by the source.
In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled (nearly) arbitrary memory can be read and written due to integer overflows in length checks. This has been patched in 2.1.0.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
freerdp2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1+dfsg1-1"}]}]
References
- advisory security-tracker.debian.org