CVE-2020-11017

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

In FreeRDP less than or equal to 2.0.0, by providing manipulated input a malicious client can create a double free condition and crash the server. This is fixed in version 2.1.0.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-415

Affected software

Vendor	Product	Versions
FreeRDP	FreeRDP	<= 2.0.0

References

http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.htmlMailing List, Third Party Advisory
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q5c8-fm29-q57cThird Party Advisory
https://lists.debian.org/debian-lts-announce/2023/10/msg00008.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.htmlMailing List, Third Party Advisory
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q5c8-fm29-q57cThird Party Advisory
https://lists.debian.org/debian-lts-announce/2023/10/msg00008.htmlMailing List, Third Party Advisory

Timeline

Published: May 29, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-110186.5In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out o CVE-2020-110196.5In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application could occur due to a r CVE-2020-11028.8A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa CVE-2020-110209.8Faye (NPM, RubyGem) versions greater than 0.5.0 and before 1.0.4, 1.1.3 and 1.2.5, has the potential for authentication bypass in the extens CVE-2020-110217.5Actions Http-Client (NPM @actions/http-client) before version 1.0.8 can disclose Authorization headers to incorrect domain in certain redire CVE-2020-110226.1In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM man CVE-2020-110236.1In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even CVE-2020-110248.2In Moonlight iOS/tvOS before 4.0.1, the pairing process is vulnerable to a man-in-the-middle attack. The bug has been fixed in Moonlight v4.CVE-2020-110255.4In affected versions of WordPress, a cross-site scripting (XSS) vulnerability in the navigation section of Customizer allows JavaScript code CVE-2020-110265.4In affected versions of WordPress, files with a specially crafted name when uploaded to the Media section can lead to script execution upon CVE-2020-110278.1In affected versions of WordPress, a password reset link emailed to a user does not expire upon changing the user password. Access would be CVE-2020-110287.5In affected versions of WordPress, some private posts, which were previously public, can result in unauthenticated disclosure under a specif