This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2020-11097 →
DEBIAN-CVE-2020-11097
In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static...
Original description
The description as published by the source.
In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
freerdp2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2+dfsg1-1"}]}]
References
- advisory security-tracker.debian.org