Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3,301

Export CSV
CVE-2020-11100

haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes

In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap via a crafted HTTP/2 request, possibly causing remote code execution.

CVSS 3.1 · 8.8 High EPSS 61.6% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 7 more
CVE-2020-11099

OOB Read in license_read_new_or_upgrade_license_packet in FreeRDP

In FreeRDP before version 2.1.2, there is an out of bounds read in license_read_new_or_upgrade_license_packet. A manipulated license packet can lead to out of bound reads to an internal buffer. This is fixed in version 2.1.2.

CVSS 3.1 · 3.5 Low EPSS 2.2% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 3 more
CVE-2020-11098

Out-of-bound read in glyph_cache_put in FreeRDP

In FreeRDP before version 2.1.2, there is an out-of-bound read in glyph_cache_put. This affects all FreeRDP clients with `+glyph-cache` option enabled This is fixed in version 2.1.2.

CVSS 3.1 · 3.5 Low EPSS 1.7% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 3 more
CVE-2020-11097

OOB read in ntlm_av_pair_get in FreeRDP

In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2.

CVSS 3.1 · 3.5 Low EPSS 1.4% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 3 more
CVE-2020-11096

Global OOB read in update_read_cache_bitmap_v3_order in FreeRDP

In FreeRDP before version 2.1.2, there is a global OOB read in update_read_cache_bitmap_v3_order. As a workaround, one can disable bitmap cache with -bitmap-cache (default). This is fixed in version 2.1.2.

CVSS 3.1 · 3.5 Low EPSS 1.9% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 3 more
CVE-2020-11095

Global OOB read in update_recv_primary_order in FreeRDP

In FreeRDP before version 2.1.2, an out of bound reads occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2.

CVSS 3.1 · 3.5 Low EPSS 1.4% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 3 more
CVE-2020-11089

Out-of-bound read in FreeRDP

In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions (parallel_process_irp_create, serial_process_irp_create, drive_process_irp_write, printer_process_irp_write, rdpei_recv_pdu, serial_process_irp_write). This has been fixed in 2.1.0.

CVSS 3.1 · 3.7 Low EPSS 1.1% KEV · Not listed
Vendors
Debian Freerdp Opensuse and 1 more
Products
Debian Linux Freerdp Leap and 1 more
CVE-2020-11088

Out-of-bound read in FreeRDP

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_NegotiateMessage. This has been fixed in 2.1.0.

CVSS 3.1 · 3.1 Low EPSS 1.4% KEV · Not listed
Vendors
Debian Freerdp Opensuse and 1 more
Products
Debian Linux Freerdp Leap and 1 more
CVE-2020-11087

Out-of-bounds Read in FreeRDP

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_AuthenticateMessage. This has been fixed in 2.1.0.

CVSS 3.1 · 3.1 Low EPSS 1.4% KEV · Not listed
Vendors
Debian Freerdp Opensuse and 1 more
Products
Debian Linux Freerdp Leap and 1 more
CVE-2020-11086

Out-of-bounds Read in FreeRDP `ntlm_read_ntlm_v2_response`

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_ntlm_v2_client_challenge that reads up to 28 bytes out-of-bound to an internal structure. This has been fixed in 2.1.0.

CVSS 3.1 · 3.1 Low EPSS 1.4% KEV · Not listed
Vendors
Debian Freerdp Opensuse and 1 more
Products
Debian Linux Freerdp Leap and 1 more
CVE-2020-11085

Out-of-bounds Read in FreeRDP

In FreeRDP before 2.1.0, there is an out-of-bounds read in cliprdr_read_format_list. Clipboard format data read (by client or server) might read data out-of-bounds. This has been fixed in 2.1.0.

CVSS 3.1 · 2.6 Low EPSS 1.7% KEV · Not listed
Vendors
Debian Freerdp Opensuse and 1 more
Products
Debian Linux Freerdp Leap and 1 more
CVE-2020-11077

HTTP Smuggling via Transfer-Encoding Header in Puma

In Puma (RubyGem) before 4.3.5 and 3.12.6, a client could smuggle a request through a proxy, causing the proxy to send a response back to another unknown client. If the proxy uses persistent connections and the client adds another request in via HTTP pipelining, the proxy may mistake it as the first request's body. Puma, however, would see it as two requests, and when processing the second request, send back a response that the proxy does not expect. If the proxy has reused the persistent connection to Puma to send another request for a different client, the second response from the first client will be sent to the second client. This is a similar but different vulnerability from CVE-2020-11076. The problem has been fixed in Puma 3.12.6 and Puma 4.3.5.

CVSS 3.1 · 6.8 Medium EPSS 2.9% KEV · Not listed
Vendors
Debian Fedoraproject Opensuse and 1 more
Products
Debian Linux Fedora Leap and 1 more
CVE-2020-11043

Out-of-bounds Read in FreeRDP

In FreeRDP less than or equal to 2.0.0, there is an out-of-bounds read in rfx_process_message_tileset. Invalid data fed to RFX decoder results in garbage on screen (as colors). This has been patched in 2.1.0.

CVSS 3.1 · 2.2 Low EPSS 1.9% KEV · Not listed
Vendors
Debian Freerdp Opensuse and 1 more
Products
Debian Linux Freerdp Leap and 1 more
CVE-2020-11041

Improper Validation of Array Index in FreeRDP

In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend (alsa, oss, pulse, ...). The most likely outcome is a crash of the client instance followed by no or distorted sound or a session disconnect. If a user cannot upgrade to the patched version, a workaround is to disable sound for the session. This has been patched in 2.1.0.

CVSS 3.1 · 2.2 Low EPSS 1.4% KEV · Not listed
Vendors
Debian Freerdp Opensuse and 1 more
Products
Debian Linux Freerdp Leap and 1 more
CVE-2020-11040

Out-of-bounds Read in FreeRDP

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound data read from memory in clear_decompress_subcode_rlex, visualized on screen as color. This has been patched in 2.1.0.

CVSS 3.1 · 2.2 Low EPSS 1.5% KEV · Not listed
Vendors
Debian Freerdp Opensuse and 1 more
Products
Debian Linux Freerdp Leap and 1 more
CVE-2020-11039

Integer Overflow in FreeRDP

In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled (nearly) arbitrary memory can be read and written due to integer overflows in length checks. This has been patched in 2.1.0.

CVSS 3.1 · 8 High EPSS 1.1% KEV · Not listed
Vendors
Debian Freerdp Opensuse and 1 more
Products
Debian Linux Freerdp Leap and 1 more
CVE-2020-11038

Integer Overflow to Buffer Overflow in FreeRDP

In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a manipulated server can instruct the client to allocate a buffer with a smaller size than requested due to an integer overflow in size calculation. With later messages, the server can manipulate the client to write data out of bound to the previously allocated buffer. This has been patched in 2.1.0.

CVSS 3.1 · 6.9 Medium EPSS 1.2% KEV · Not listed
Vendors
Debian Freerdp Opensuse and 1 more
Products
Debian Linux Freerdp Leap and 1 more
CVE-2020-11019

Out of bound read in update_recv in FreeRDP

In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as string to local terminal. This has been fixed in 2.1.0.

CVSS 3.1 · 4.3 Medium EPSS 2.3% KEV · Not listed
Vendors
Debian Freerdp Opensuse and 1 more
Products
Debian Linux Freerdp Leap and 1 more