CVE-2020-11089 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2020-11089 Interim 1 21 2025-02-17T01:32:01Z current 2021-05-30T14:39:16Z 2025-02-17T01:32:01Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2020-11089 In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions (parallel_process_irp_create, serial_process_irp_create, drive_process_irp_write, printer_process_irp_write, rdpei_recv_pdu, serial_process_irp_write). This has been fixed in 2.1.0. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html E-Mail link for SUSE-SU-2020:2032-1 https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html E-Mail link for SUSE-SU-2020:2068-1 https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html E-Mail link for SUSE-SU-2020:2272-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PMFBUGT3IBZIELBHFAWBVPCGUFYQHVRD/ E-Mail link for openSUSE-SU-2020:1090-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Liberty Linux 7 SUSE Liberty Linux 8 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP3 openSUSE Leap 15.1 freerdp-2.1.1-1.el8 freerdp-2.1.1-2.el7 freerdp-2.1.2-10.15.1 freerdp-2.1.2-12.20.1 freerdp-2.1.2-15.7.1 freerdp-2.1.2-lp151.5.6.1 freerdp-devel-2.1.1-1.el8 freerdp-devel-2.1.1-2.el7 freerdp-devel-2.1.2-10.15.1 freerdp-devel-2.1.2-12.20.1 freerdp-devel-2.1.2-15.7.1 freerdp-devel-2.1.2-lp151.5.6.1 freerdp-libs-2.1.1-1.el8 freerdp-libs-2.1.1-2.el7 freerdp-proxy-2.1.2-12.20.1 freerdp-proxy-2.1.2-15.7.1 freerdp-proxy-2.1.2-lp151.5.6.1 freerdp-server-2.1.2-12.20.1 freerdp-server-2.1.2-lp151.5.6.1 freerdp-wayland-2.1.2-lp151.5.6.1 libfreerdp2-2.1.2-10.15.1 libfreerdp2-2.1.2-12.20.1 libfreerdp2-2.1.2-15.7.1 libfreerdp2-2.1.2-lp151.5.6.1 libuwac0-0-2.1.2-lp151.5.6.1 libwinpr-2.1.1-1.el8 libwinpr-2.1.1-2.el7 libwinpr-devel-2.1.1-1.el8 libwinpr-devel-2.1.1-2.el7 libwinpr2-2.1.2-10.15.1 libwinpr2-2.1.2-12.20.1 libwinpr2-2.1.2-15.7.1 libwinpr2-2.1.2-lp151.5.6.1 uwac0-0-devel-2.1.2-lp151.5.6.1 vinagre-3.20.2-16.3.3 vinagre-3.22.0-23.el8 vinagre-lang-3.20.2-16.3.3 winpr2-devel-2.1.2-10.15.1 winpr2-devel-2.1.2-12.20.1 winpr2-devel-2.1.2-15.7.1 winpr2-devel-2.1.2-lp151.5.6.1 freerdp-2.1.1-2.el7 as a component of SUSE Liberty Linux 7 freerdp-devel-2.1.1-2.el7 as a component of SUSE Liberty Linux 7 freerdp-libs-2.1.1-2.el7 as a component of SUSE Liberty Linux 7 libwinpr-2.1.1-2.el7 as a component of SUSE Liberty Linux 7 libwinpr-devel-2.1.1-2.el7 as a component of SUSE Liberty Linux 7 freerdp-2.1.1-1.el8 as a component of SUSE Liberty Linux 8 freerdp-devel-2.1.1-1.el8 as a component of SUSE Liberty Linux 8 freerdp-libs-2.1.1-1.el8 as a component of SUSE Liberty Linux 8 libwinpr-2.1.1-1.el8 as a component of SUSE Liberty Linux 8 libwinpr-devel-2.1.1-1.el8 as a component of SUSE Liberty Linux 8 vinagre-3.22.0-23.el8 as a component of SUSE Liberty Linux 8 freerdp-devel-2.1.2-12.20.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libfreerdp2-2.1.2-12.20.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libwinpr2-2.1.2-12.20.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 winpr2-devel-2.1.2-12.20.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 freerdp-2.1.2-12.20.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 freerdp-proxy-2.1.2-12.20.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 freerdp-server-2.1.2-12.20.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 libfreerdp2-2.1.2-12.20.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 libwinpr2-2.1.2-12.20.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 vinagre-3.20.2-16.3.3 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 vinagre-lang-3.20.2-16.3.3 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 freerdp-2.1.2-10.15.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 freerdp-devel-2.1.2-10.15.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 libfreerdp2-2.1.2-10.15.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 libwinpr2-2.1.2-10.15.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 winpr2-devel-2.1.2-10.15.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 freerdp-2.1.2-15.7.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 freerdp-devel-2.1.2-15.7.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 libfreerdp2-2.1.2-15.7.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 libwinpr2-2.1.2-15.7.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 winpr2-devel-2.1.2-15.7.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 freerdp-2.1.2-15.7.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 freerdp-devel-2.1.2-15.7.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 freerdp-proxy-2.1.2-15.7.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 libfreerdp2-2.1.2-15.7.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 libwinpr2-2.1.2-15.7.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 winpr2-devel-2.1.2-15.7.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 freerdp-2.1.2-lp151.5.6.1 as a component of openSUSE Leap 15.1 freerdp-devel-2.1.2-lp151.5.6.1 as a component of openSUSE Leap 15.1 freerdp-proxy-2.1.2-lp151.5.6.1 as a component of openSUSE Leap 15.1 freerdp-server-2.1.2-lp151.5.6.1 as a component of openSUSE Leap 15.1 freerdp-wayland-2.1.2-lp151.5.6.1 as a component of openSUSE Leap 15.1 libfreerdp2-2.1.2-lp151.5.6.1 as a component of openSUSE Leap 15.1 libuwac0-0-2.1.2-lp151.5.6.1 as a component of openSUSE Leap 15.1 libwinpr2-2.1.2-lp151.5.6.1 as a component of openSUSE Leap 15.1 uwac0-0-devel-2.1.2-lp151.5.6.1 as a component of openSUSE Leap 15.1 winpr2-devel-2.1.2-lp151.5.6.1 as a component of openSUSE Leap 15.1 In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions (parallel_process_irp_create, serial_process_irp_create, drive_process_irp_write, printer_process_irp_write, rdpei_recv_pdu, serial_process_irp_write). This has been fixed in 2.1.0. CVE-2020-11089 SUSE Liberty Linux 7:freerdp-2.1.1-2.el7 SUSE Liberty Linux 7:freerdp-devel-2.1.1-2.el7 SUSE Liberty Linux 7:freerdp-libs-2.1.1-2.el7 SUSE Liberty Linux 7:libwinpr-2.1.1-2.el7 SUSE Liberty Linux 7:libwinpr-devel-2.1.1-2.el7 SUSE Liberty Linux 8:freerdp-2.1.1-1.el8 SUSE Liberty Linux 8:freerdp-devel-2.1.1-1.el8 SUSE Liberty Linux 8:freerdp-libs-2.1.1-1.el8 SUSE Liberty Linux 8:libwinpr-2.1.1-1.el8 SUSE Liberty Linux 8:libwinpr-devel-2.1.1-1.el8 SUSE Liberty Linux 8:vinagre-3.22.0-23.el8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:freerdp-server-2.1.2-15.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:freerdp-wayland-2.1.2-15.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:libuwac0-0-2.1.2-15.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:uwac0-0-devel-2.1.2-15.7.1 SUSE Linux Enterprise Software Development Kit 12 SP5:freerdp-devel-2.1.2-12.20.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libfreerdp2-2.1.2-12.20.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libwinpr2-2.1.2-12.20.1 SUSE Linux Enterprise Software Development Kit 12 SP5:winpr2-devel-2.1.2-12.20.1 SUSE Linux Enterprise Workstation Extension 12 SP5:freerdp-2.1.2-12.20.1 SUSE Linux Enterprise Workstation Extension 12 SP5:freerdp-proxy-2.1.2-12.20.1 SUSE Linux Enterprise Workstation Extension 12 SP5:freerdp-server-2.1.2-12.20.1 SUSE Linux Enterprise Workstation Extension 12 SP5:libfreerdp2-2.1.2-12.20.1 SUSE Linux Enterprise Workstation Extension 12 SP5:libwinpr2-2.1.2-12.20.1 SUSE Linux Enterprise Workstation Extension 12 SP5:vinagre-3.20.2-16.3.3 SUSE Linux Enterprise Workstation Extension 12 SP5:vinagre-lang-3.20.2-16.3.3 SUSE Linux Enterprise Workstation Extension 15 SP1:freerdp-2.1.2-10.15.1 SUSE Linux Enterprise Workstation Extension 15 SP1:freerdp-devel-2.1.2-10.15.1 SUSE Linux Enterprise Workstation Extension 15 SP1:libfreerdp2-2.1.2-10.15.1 SUSE Linux Enterprise Workstation Extension 15 SP1:libwinpr2-2.1.2-10.15.1 SUSE Linux Enterprise Workstation Extension 15 SP1:winpr2-devel-2.1.2-10.15.1 SUSE Linux Enterprise Workstation Extension 15 SP2:freerdp-2.1.2-15.7.1 SUSE Linux Enterprise Workstation Extension 15 SP2:freerdp-devel-2.1.2-15.7.1 SUSE Linux Enterprise Workstation Extension 15 SP2:libfreerdp2-2.1.2-15.7.1 SUSE Linux Enterprise Workstation Extension 15 SP2:libwinpr2-2.1.2-15.7.1 SUSE Linux Enterprise Workstation Extension 15 SP2:winpr2-devel-2.1.2-15.7.1 SUSE Linux Enterprise Workstation Extension 15 SP3:freerdp-2.1.2-15.7.1 SUSE Linux Enterprise Workstation Extension 15 SP3:freerdp-devel-2.1.2-15.7.1 SUSE Linux Enterprise Workstation Extension 15 SP3:freerdp-proxy-2.1.2-15.7.1 SUSE Linux Enterprise Workstation Extension 15 SP3:libfreerdp2-2.1.2-15.7.1 SUSE Linux Enterprise Workstation Extension 15 SP3:libwinpr2-2.1.2-15.7.1 SUSE Linux Enterprise Workstation Extension 15 SP3:winpr2-devel-2.1.2-15.7.1 openSUSE Leap 15.1:freerdp-2.1.2-lp151.5.6.1 openSUSE Leap 15.1:freerdp-devel-2.1.2-lp151.5.6.1 openSUSE Leap 15.1:freerdp-proxy-2.1.2-lp151.5.6.1 openSUSE Leap 15.1:freerdp-server-2.1.2-lp151.5.6.1 openSUSE Leap 15.1:freerdp-wayland-2.1.2-lp151.5.6.1 openSUSE Leap 15.1:libfreerdp2-2.1.2-lp151.5.6.1 openSUSE Leap 15.1:libuwac0-0-2.1.2-lp151.5.6.1 openSUSE Leap 15.1:libwinpr2-2.1.2-lp151.5.6.1 openSUSE Leap 15.1:uwac0-0-devel-2.1.2-lp151.5.6.1 openSUSE Leap 15.1:winpr2-devel-2.1.2-lp151.5.6.1 important 6 AV:N/AC:M/Au:S/C:P/I:P/A:P 3.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N