8.3

CVE-2020-13398: canonical ubuntu_linux Out-of-bounds Write

CVSS: 8.3v3.1HighModified
AliasesRHSA-2020:2405RHSA-2020:2406RHSA-2020:2407
Published 22-05-2020Last modified 04-08-2024
Open JSON

Vulnerability summary

CVE-2020-13398 is a high (CVSS 8.3) Out-of-bounds Write vulnerability in canonical ubuntu_linux. EPSS estimates a 2.33% chance of exploitation in the next 30 days, higher than 83.2% of scored vulnerabilities.

Overall risk
34/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.3/10
010
High · v3.1 (NVD)
EPSS score
2.33%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 11 · Related 8
DLA-2356-1DLA-3606-1MGASA-2020-0297OPENSUSE-SU-2020:1090-1OPENSUSE-SU-2024:10768-1SUSE-SU-2020:2032-1

Timeline

  1. 22-05-2020
    PublishedVulnerability first disclosed.
  2. 04-08-2024
    Last modifiedVulnerability information updated.

Description

An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) write vulnerability has been detected in crypto_rsa_common in libfreerdp/crypto/crypto.c.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

2.33%

Chance of exploitation in the next 30 days

Percentile

83%

Versus all other CVEs

30-day change

0.00 pp

From 2.33% on 18-09-2026

18-09-202618-10-2026
EPSS score
2.33%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Redhat10 products
  • freerdp< 0:2.0.0-4.rc4.el7_8.1 | < 0:1.0.2-7.el6_10 | < 2:2.0.0-46.rc4.el8_2.2 | < 2:2.0.0-46.rc4.el8_1.2 | < 2:2.0.0-46.rc4.el8_0.2
  • freerdp-debuginfo< 0:2.0.0-4.rc4.el7_8.1 | < 0:1.0.2-7.el6_10 | < 2:2.0.0-46.rc4.el8_2.2 | < 2:2.0.0-46.rc4.el8_1.2 | < 2:2.0.0-46.rc4.el8_0.2
  • freerdp-debugsource< 2:2.0.0-46.rc4.el8_2.2 | < 2:2.0.0-46.rc4.el8_1.2 | < 2:2.0.0-46.rc4.el8_0.2
  • freerdp-devel< 0:2.0.0-4.rc4.el7_8.1 | < 0:1.0.2-7.el6_10 | < 2:2.0.0-46.rc4.el8_2.2 | < 2:2.0.0-46.rc4.el8_1.2
  • freerdp-libs< 0:2.0.0-4.rc4.el7_8.1 | < 0:1.0.2-7.el6_10 | < 2:2.0.0-46.rc4.el8_2.2 | < 2:2.0.0-46.rc4.el8_1.2 | < 2:2.0.0-46.rc4.el8_0.2
Debian2 products
Ubuntu2 products
  • freerdp< 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4 | < 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2
  • freerdp2< 2.1.1+dfsg1-0ubuntu0.18.04.1 | < 2.1.1+dfsg1-0ubuntu0.20.04.1
Canonical1 product
Freerdp1 product
Opensuse1 product

6 vendors · 17 products

References

28 links
Show all 28 references