This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2020-11049 →
DEBIAN-CVE-2020-11049
In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bound read of client memory that is then passed on to the protocol parser. This has been pat...
Original description
The description as published by the source.
In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bound read of client memory that is then passed on to the protocol parser. This has been patched in 2.0.0.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
freerdp2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1+dfsg1-1"}]}]
References
- advisory security-tracker.debian.org