PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›CVE-2020-11019

CVE-2020-11019

freerdp: Out of bound read in update_recv could result in a crash

Loading…

Severity

Low

Red Hat Product Security

6.5

CVSS 3.1

Review impact separately from score.

Published · April 9, 2020

Updated · February 24, 2026

Description

In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as string to local terminal. This has been fixed in 2.1.0.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

This flaw can be mitigated by not setting the logging level to "trace" on the freerdp server.

CVSS / CWE

CVSS 3.1 · 6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-125 · Out-of-bounds Read