FreeRDP up to 2.0.0 array index

Summaryinfo

A vulnerability identified as problematic has been detected in FreeRDP up to 2.0.0. Affected by this issue is some unknown functionality. Performing a manipulation results in array index. This vulnerability is identified as CVE-2020-11041. The attack can be initiated remotely. There is not any exploit available. You should upgrade the affected component.

Detailsinfo

A vulnerability classified as problematic has been found in FreeRDP up to 2.0.0. This affects some unknown functionality. The manipulation with an unknown input leads to a array index vulnerability. CWE is classifying the issue as CWE-129. The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array. This is going to have an impact on availability. The summary by CVE is:

In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend (alsa, oss, pulse, ...). The most likely outcome is a crash of the client instance followed by no or distorted sound or a session disconnect. If a user cannot upgrade to the patched version, a workaround is to disable sound for the session. This has been patched in 2.1.0.

The weakness was released 05/29/2020 (GitHub Repository). It is possible to read the advisory at github.com. This vulnerability is uniquely identified as CVE-2020-11041 since 03/30/2020. The exploitability is told to be difficult. It is possible to initiate the attack remotely. The exploitation needs additional levels of successful authentication. The technical details are unknown and an exploit is not publicly available.

The vulnerability scanner Nessus provides a plugin with the ID 236628 (Alibaba Cloud Linux 3 : 0002: freerdp (ALINUX3-SA-2022:0002)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 2.1.0 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (236628). Entries connected to this vulnerability are available at VDB-155875, VDB-155874, VDB-155873 and VDB-155872. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Remote Access Software

Name

• FreeRDP

Version

• 2.0

License

• open-source

Website

• Product: https://github.com/FreeRDP/FreeRDP/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion