{"schemaVersion":3,"id":"SUSE-SU-2020:2272-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for freerdp\n\nThis update for freerdp fixes the following issues:\n\nfreerdp was updated to version 2.1.2 (bsc#1171441,bsc#1173247 and jsc#ECO-2006):\n\n- CVE-2020-11017: Fixed a double free which could have denied the server's service.\n- CVE-2020-11018: Fixed an out of bounds read which a malicious clients could have triggered.\n- CVE-2020-11019: Fixed an issue which could have led to denial of service if logger was set to 'WLOG_TRACE'.\n- CVE-2020-11038: Fixed a buffer overflow when /video redirection was used.\n- CVE-2020-11039: Fixed an issue which could have allowed arbitrary memory read and write when USB redirection was enabled.\n- CVE-2020-11040: Fixed an out of bounds data read in clear_decompress_subcode_rlex.\n- CVE-2020-11041: Fixed an issue with the configuration for sound backend which could have led to server's denial of service.\n- CVE-2020-11043: Fixed an out of bounds read in rfx_process_message_tileset.\n- CVE-2020-11085: Fixed an out of bounds read in cliprdr_read_format_list.\n- CVE-2020-11086: Fixed an out of bounds read in ntlm_read_ntlm_v2_client_challenge.\n- CVE-2020-11087: Fixed an out of bounds read in ntlm_read_AuthenticateMessage.\n- CVE-2020-11088: Fixed an out of bounds read in ntlm_read_NegotiateMessage.\n- CVE-2020-11089: Fixed an out of bounds read in irp function family.\n- CVE-2020-11095: Fixed a global out of bounds read in update_recv_primary_order.\n- CVE-2020-11096: Fixed a global out of bounds read in update_read_cache_bitmap_v3_order.\n- CVE-2020-11097: Fixed an out of bounds read in ntlm_av_pair_get.\n- CVE-2020-11098: Fixed an out of bounds read in glyph_cache_put.\n- CVE-2020-11099: Fixed an out of bounds Read in license_read_new_or_upgrade_license_packet.\n- CVE-2020-11521: Fixed an out of bounds write in planar.c (bsc#1171443).\n- CVE-2020-11522: Fixed an out of bounds read in gdi.c (bsc#1171444).\n- CVE-2020-11523: Fixed an integer overflow in region.c (bsc#1171445).\n- CVE-2020-11524: Fixed an out of bounds write in interleaved.c (bsc#1171446).\n- CVE-2020-11525: Fixed an out of bounds read in bitmap.c (bsc#1171447).\n- CVE-2020-11526: Fixed an out of bounds read in update_recv_secondary_order (bsc#1171674).\n- CVE-2020-13396: Fixed an Read in ntlm_read_ChallengeMessage.\n- CVE-2020-13397: Fixed an out of bounds read in security_fips_decrypt due to uninitialized value.\n- CVE-2020-13398: Fixed an out of bounds write in crypto_rsa_common.\n- CVE-2020-4030: Fixed an out of bounds read in `TrioParse`.\n- CVE-2020-4031: Fixed a use after free in gdi_SelectObject.\n- CVE-2020-4032: Fixed an integer casting in `update_recv_secondary_order`.\n- CVE-2020-4033: Fixed an out of bound read in RLEDECOMPRESS.\n- Fixed an issue where freerdp failed with -fno-common (bsc#1169748).\n- Fixed an issue where USB redirection with FreeRDP was not working (bsc#1169679).\n- Fixed an issue where freerdp could not start (bsc#1129193).\n- Fixed an issue where copy and paste between remote host was transforming text to chinese (bsc#1004108).\n- Added pulse support (bsc#1090677).\n\nAdditionally, the following issue was fixed:\n\n- CVE-2020-15103: Fix integer overflow due to missing input sanitation in rdpegfx channel (bsc#1174321).","dates":{"published":"2020-08-18T14:44:51.000Z","modified":"2026-02-04T02:32:54.178Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"freerdp&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","name":"freerdp","label":"freerdp&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/freerdp&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","purlType":"rpm","versions":[{"text":"< 2.1.2-12.20.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.1.2-12.20.1","eol":null,"hubHref":null},{"vendor":"suse","product":"freerdp&distro=SUSE Linux Enterprise Workstation Extension 12 SP5","name":"freerdp","label":"freerdp&distro=SUSE Linux Enterprise Workstation Extension 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/freerdp&distro=SUSE Linux Enterprise Workstation Extension 12 SP5","purlType":"rpm","versions":[{"text":"< 2.1.2-12.20.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.1.2-12.20.1","eol":null,"hubHref":null},{"vendor":"suse","product":"vinagre&distro=SUSE Linux Enterprise Workstation Extension 12 SP5","name":"vinagre","label":"vinagre&distro=SUSE Linux Enterprise Workstation Extension 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/vinagre&distro=SUSE Linux Enterprise Workstation Extension 12 SP5","purlType":"rpm","versions":[{"text":"< 3.20.2-16.3.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.20.2-16.3.3","eol":null,"hubHref":null}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202272-1/","label":"www.suse.com/support/update/announcement/2020/suse-su-20202272-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1004108","label":"bugzilla.suse.com/1004108","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1050699","label":"bugzilla.suse.com/1050699","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1050704","label":"bugzilla.suse.com/1050704","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1050708","label":"bugzilla.suse.com/1050708","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1050711","label":"bugzilla.suse.com/1050711","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1050712","label":"bugzilla.suse.com/1050712","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1050714","label":"bugzilla.suse.com/1050714","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1085416","label":"bugzilla.suse.com/1085416","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1087240","label":"bugzilla.suse.com/1087240","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1090677","label":"bugzilla.suse.com/1090677","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1103557","label":"bugzilla.suse.com/1103557","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1104918","label":"bugzilla.suse.com/1104918","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1112028","label":"bugzilla.suse.com/1112028","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1116708","label":"bugzilla.suse.com/1116708","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1117963","label":"bugzilla.suse.com/1117963","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1117964","label":"bugzilla.suse.com/1117964","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1117965","label":"bugzilla.suse.com/1117965","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1117966","label":"bugzilla.suse.com/1117966","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1117967","label":"bugzilla.suse.com/1117967","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1120507","label":"bugzilla.suse.com/1120507","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1129193","label":"bugzilla.suse.com/1129193","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1169679","label":"bugzilla.suse.com/1169679","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1169748","label":"bugzilla.suse.com/1169748","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1171441","label":"bugzilla.suse.com/1171441","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1171443","label":"bugzilla.suse.com/1171443","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1171444","label":"bugzilla.suse.com/1171444","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1171445","label":"bugzilla.suse.com/1171445","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1171446","label":"bugzilla.suse.com/1171446","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1171447","label":"bugzilla.suse.com/1171447","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1171674","label":"bugzilla.suse.com/1171674","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1173247","label":"bugzilla.suse.com/1173247","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1173605","label":"bugzilla.suse.com/1173605","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1174200","label":"bugzilla.suse.com/1174200","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1174321","label":"bugzilla.suse.com/1174321","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2834","label":"www.suse.com/security/cve/CVE-2017-2834","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2835","label":"www.suse.com/security/cve/CVE-2017-2835","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2836","label":"www.suse.com/security/cve/CVE-2017-2836","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2837","label":"www.suse.com/security/cve/CVE-2017-2837","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2838","label":"www.suse.com/security/cve/CVE-2017-2838","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2839","label":"www.suse.com/security/cve/CVE-2017-2839","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0886","label":"www.suse.com/security/cve/CVE-2018-0886","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000852","label":"www.suse.com/security/cve/CVE-2018-1000852","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8784","label":"www.suse.com/security/cve/CVE-2018-8784","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8785","label":"www.suse.com/security/cve/CVE-2018-8785","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8786","label":"www.suse.com/security/cve/CVE-2018-8786","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8787","label":"www.suse.com/security/cve/CVE-2018-8787","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8788","label":"www.suse.com/security/cve/CVE-2018-8788","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8789","label":"www.suse.com/security/cve/CVE-2018-8789","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11017","label":"www.suse.com/security/cve/CVE-2020-11017","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11018","label":"www.suse.com/security/cve/CVE-2020-11018","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11019","label":"www.suse.com/security/cve/CVE-2020-11019","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11038","label":"www.suse.com/security/cve/CVE-2020-11038","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11039","label":"www.suse.com/security/cve/CVE-2020-11039","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11040","label":"www.suse.com/security/cve/CVE-2020-11040","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11041","label":"www.suse.com/security/cve/CVE-2020-11041","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11043","label":"www.suse.com/security/cve/CVE-2020-11043","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11085","label":"www.suse.com/security/cve/CVE-2020-11085","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11086","label":"www.suse.com/security/cve/CVE-2020-11086","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11087","label":"www.suse.com/security/cve/CVE-2020-11087","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11088","label":"www.suse.com/security/cve/CVE-2020-11088","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11089","label":"www.suse.com/security/cve/CVE-2020-11089","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11095","label":"www.suse.com/security/cve/CVE-2020-11095","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11096","label":"www.suse.com/security/cve/CVE-2020-11096","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11097","label":"www.suse.com/security/cve/CVE-2020-11097","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11098","label":"www.suse.com/security/cve/CVE-2020-11098","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11099","label":"www.suse.com/security/cve/CVE-2020-11099","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11521","label":"www.suse.com/security/cve/CVE-2020-11521","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11522","label":"www.suse.com/security/cve/CVE-2020-11522","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11523","label":"www.suse.com/security/cve/CVE-2020-11523","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11524","label":"www.suse.com/security/cve/CVE-2020-11524","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11525","label":"www.suse.com/security/cve/CVE-2020-11525","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11526","label":"www.suse.com/security/cve/CVE-2020-11526","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13396","label":"www.suse.com/security/cve/CVE-2020-13396","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13397","label":"www.suse.com/security/cve/CVE-2020-13397","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13398","label":"www.suse.com/security/cve/CVE-2020-13398","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15103","label":"www.suse.com/security/cve/CVE-2020-15103","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-4030","label":"www.suse.com/security/cve/CVE-2020-4030","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-4031","label":"www.suse.com/security/cve/CVE-2020-4031","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-4032","label":"www.suse.com/security/cve/CVE-2020-4032","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-4033","label":"www.suse.com/security/cve/CVE-2020-4033","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2017-2834","CVE-2017-2835","CVE-2017-2836","CVE-2017-2837","CVE-2017-2838","CVE-2017-2839","CVE-2018-0886","CVE-2018-1000852","CVE-2018-8784","CVE-2018-8785","CVE-2018-8786","CVE-2018-8787","CVE-2018-8788","CVE-2018-8789","CVE-2020-11017","CVE-2020-11018","CVE-2020-11019","CVE-2020-11038","CVE-2020-11039","CVE-2020-11040","CVE-2020-11041","CVE-2020-11043","CVE-2020-11085","CVE-2020-11086","CVE-2020-11087","CVE-2020-11088","CVE-2020-11089","CVE-2020-11095","CVE-2020-11096","CVE-2020-11097","CVE-2020-11098","CVE-2020-11099","CVE-2020-11521","CVE-2020-11522","CVE-2020-11523","CVE-2020-11524","CVE-2020-11525","CVE-2020-11526","CVE-2020-13396","CVE-2020-13397","CVE-2020-13398","CVE-2020-15103","CVE-2020-4030","CVE-2020-4031","CVE-2020-4032","CVE-2020-4033"],"downstream":[],"duplicates":[],"related":["CVE-2017-2834","CVE-2017-2835","CVE-2017-2836","CVE-2017-2837","CVE-2017-2838","CVE-2017-2839","CVE-2018-0886","CVE-2018-1000852","CVE-2018-8784","CVE-2018-8785","CVE-2018-8786","CVE-2018-8787","CVE-2018-8788","CVE-2018-8789","CVE-2020-11017","CVE-2020-11018","CVE-2020-11019","CVE-2020-11038","CVE-2020-11039","CVE-2020-11040","CVE-2020-11041","CVE-2020-11043","CVE-2020-11085","CVE-2020-11086","CVE-2020-11087","CVE-2020-11088","CVE-2020-11089","CVE-2020-11095","CVE-2020-11096","CVE-2020-11097","CVE-2020-11098","CVE-2020-11099","CVE-2020-11521","CVE-2020-11522","CVE-2020-11523","CVE-2020-11524","CVE-2020-11525","CVE-2020-11526","CVE-2020-13396","CVE-2020-13397","CVE-2020-13398","CVE-2020-15103","CVE-2020-4030","CVE-2020-4031","CVE-2020-4032","CVE-2020-4033"]},"timeline":[{"kind":"published","date":"2020-08-18T14:44:51.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T02:32:54.178Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T06:21:00.486Z","stale":false,"partial":false}}