CVE-2020-13398
Summary
| CVE | CVE-2020-13398 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2020-05-22 18:15:00 UTC |
|---|
| Updated | 2023-10-24 15:31:00 UTC |
|---|
| Description | An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) write vulnerability has been detected in crypto_rsa_common in libfreerdp/crypto/crypto.c. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| USN-4379-1: FreeRDP vulnerabilities | Ubuntu security notices | Ubuntu |
UBUNTU |
usn.ubuntu.com |
Third Party Advisory |
| Updated changelog for 2.1.1 · FreeRDP/FreeRDP@8fb6336 · GitHub |
MISC |
github.com |
Third Party Advisory |
| Fixed GHSL-2020-102 heap overflow · FreeRDP/FreeRDP@8305349 · GitHub |
MISC |
github.com |
Patch, Third Party Advisory |
| [SECURITY] [DLA 3606-1] freerdp2 security update |
MLIST |
lists.debian.org |
|
| [security-announce] openSUSE-SU-2020:1090-1: important: Security update |
SUSE |
lists.opensuse.org |
Third Party Advisory |
| [SECURITY] [DLA 2356-1] freerdp security update |
MLIST |
lists.debian.org |
Third Party Advisory |
| Comparing 2.1.0...2.1.1 · FreeRDP/FreeRDP · GitHub |
MISC |
github.com |
Release Notes, Third Party Advisory |
| USN-4382-1: FreeRDP vulnerabilities | Ubuntu security notices | Ubuntu |
UBUNTU |
usn.ubuntu.com |
Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 374379 EulerOS Security Update for freerdp (EulerOS-SA-2020-2343)
- 377018 Alibaba Cloud Linux Security Update for freerdp (ALINUX2-SA-2020:0097)
- 500963 Alpine Linux Security Update for freerdp
- 6000137 Debian Security Update for freerdp2 (DLA 3606-1)
