CVE-2020-11097 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2020-11097 Interim 1 27 2026-03-05T05:52:45Z current 2021-05-30T14:39:17Z 2026-03-05T05:52:45Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2020-11097 In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2020-July/007177.html E-Mail link for SUSE-SU-2020:2032-1 https://lists.suse.com/pipermail/sle-security-updates/2020-July/007190.html E-Mail link for SUSE-SU-2020:2068-1 https://lists.suse.com/pipermail/sle-security-updates/2020-August/007279.html E-Mail link for SUSE-SU-2020:2272-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PMFBUGT3IBZIELBHFAWBVPCGUFYQHVRD/ E-Mail link for openSUSE-SU-2020:1090-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Liberty Linux 8 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP4 openSUSE Leap 15.1 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Tumbleweed freerdp-2.1.2-10.15.1 freerdp-2.1.2-12.20.1 freerdp-2.1.2-15.7.1 freerdp-2.1.2-bp153.1.35 freerdp-2.1.2-lp151.5.6.1 freerdp-2.2.0-1.el8 freerdp-2.4.0-150400.1.12 freerdp-2.4.0-2.1 freerdp-3.10.3-160000.2.2 freerdp-devel-2.1.2-10.15.1 freerdp-devel-2.1.2-12.20.1 freerdp-devel-2.1.2-15.7.1 freerdp-devel-2.1.2-lp151.5.6.1 freerdp-devel-2.2.0-1.el8 freerdp-devel-2.4.0-150400.1.12 freerdp-devel-2.4.0-2.1 freerdp-devel-3.10.3-160000.2.2 freerdp-libs-2.2.0-1.el8 freerdp-proxy-2.1.2-12.20.1 freerdp-proxy-2.1.2-15.7.1 freerdp-proxy-2.1.2-lp151.5.6.1 freerdp-proxy-2.4.0-150400.1.12 freerdp-proxy-2.4.0-2.1 freerdp-proxy-3.10.3-160000.2.2 freerdp-proxy-plugins-3.10.3-160000.2.2 freerdp-sdl-3.10.3-160000.2.2 freerdp-server-2.1.2-12.20.1 freerdp-server-2.1.2-lp151.5.6.1 freerdp-server-2.4.0-2.1 freerdp-server-3.10.3-160000.2.2 freerdp-wayland-2.1.2-lp151.5.6.1 freerdp-wayland-2.4.0-2.1 freerdp-wayland-3.10.3-160000.2.2 libfreerdp-server-proxy3-3-3.10.3-160000.2.2 libfreerdp2-2.1.2-10.15.1 libfreerdp2-2.1.2-12.20.1 libfreerdp2-2.1.2-15.7.1 libfreerdp2-2.1.2-bp153.1.35 libfreerdp2-2.1.2-lp151.5.6.1 libfreerdp2-2.4.0-150400.1.12 libfreerdp2-2.4.0-2.1 libfreerdp3-3-3.10.3-160000.2.2 librdtk0-0-3.10.3-160000.2.2 libuwac0-0-2.1.2-lp151.5.6.1 libuwac0-0-2.4.0-2.1 libuwac0-0-3.10.3-160000.2.2 libwinpr-2.2.0-1.el8 libwinpr-devel-2.2.0-1.el8 libwinpr2-2.1.2-10.15.1 libwinpr2-2.1.2-12.20.1 libwinpr2-2.1.2-15.7.1 libwinpr2-2.1.2-bp153.1.35 libwinpr2-2.1.2-lp151.5.6.1 libwinpr2-2.4.0-150400.1.12 libwinpr2-2.4.0-2.1 libwinpr3-3-3.10.3-160000.2.2 uwac0-0-devel-2.1.2-lp151.5.6.1 uwac0-0-devel-2.4.0-2.1 vinagre-3.20.2-16.3.3 vinagre-lang-3.20.2-16.3.3 winpr-devel-3.10.3-160000.2.2 winpr2-devel-2.1.2-10.15.1 winpr2-devel-2.1.2-12.20.1 winpr2-devel-2.1.2-15.7.1 winpr2-devel-2.1.2-lp151.5.6.1 winpr2-devel-2.4.0-150400.1.12 winpr2-devel-2.4.0-2.1 freerdp-2.2.0-1.el8 as a component of SUSE Liberty Linux 8 freerdp-devel-2.2.0-1.el8 as a component of SUSE Liberty Linux 8 freerdp-libs-2.2.0-1.el8 as a component of SUSE Liberty Linux 8 libwinpr-2.2.0-1.el8 as a component of SUSE Liberty Linux 8 libwinpr-devel-2.2.0-1.el8 as a component of SUSE Liberty Linux 8 freerdp-3.10.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 freerdp-devel-3.10.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 freerdp-proxy-3.10.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 freerdp-proxy-plugins-3.10.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 freerdp-sdl-3.10.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 freerdp-server-3.10.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 freerdp-wayland-3.10.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libfreerdp-server-proxy3-3-3.10.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libfreerdp3-3-3.10.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 librdtk0-0-3.10.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libuwac0-0-3.10.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libwinpr3-3-3.10.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 winpr-devel-3.10.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 freerdp-devel-2.1.2-12.20.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libfreerdp2-2.1.2-12.20.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libwinpr2-2.1.2-12.20.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 winpr2-devel-2.1.2-12.20.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 freerdp-2.1.2-12.20.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 freerdp-proxy-2.1.2-12.20.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 freerdp-server-2.1.2-12.20.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 libfreerdp2-2.1.2-12.20.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 libwinpr2-2.1.2-12.20.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 vinagre-3.20.2-16.3.3 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 vinagre-lang-3.20.2-16.3.3 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 freerdp-2.1.2-10.15.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 freerdp-devel-2.1.2-10.15.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 libfreerdp2-2.1.2-10.15.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 libwinpr2-2.1.2-10.15.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 winpr2-devel-2.1.2-10.15.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 freerdp-2.1.2-15.7.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 freerdp-devel-2.1.2-15.7.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 libfreerdp2-2.1.2-15.7.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 libwinpr2-2.1.2-15.7.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 winpr2-devel-2.1.2-15.7.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 freerdp-2.1.2-15.7.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 freerdp-devel-2.1.2-15.7.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 freerdp-proxy-2.1.2-15.7.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 libfreerdp2-2.1.2-15.7.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 libwinpr2-2.1.2-15.7.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 winpr2-devel-2.1.2-15.7.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 freerdp-2.4.0-150400.1.12 as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 freerdp-devel-2.4.0-150400.1.12 as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 freerdp-proxy-2.4.0-150400.1.12 as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 libfreerdp2-2.4.0-150400.1.12 as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 libwinpr2-2.4.0-150400.1.12 as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 winpr2-devel-2.4.0-150400.1.12 as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 freerdp-2.1.2-lp151.5.6.1 as a component of openSUSE Leap 15.1 freerdp-devel-2.1.2-lp151.5.6.1 as a component of openSUSE Leap 15.1 freerdp-proxy-2.1.2-lp151.5.6.1 as a component of openSUSE Leap 15.1 freerdp-server-2.1.2-lp151.5.6.1 as a component of openSUSE Leap 15.1 freerdp-wayland-2.1.2-lp151.5.6.1 as a component of openSUSE Leap 15.1 libfreerdp2-2.1.2-lp151.5.6.1 as a component of openSUSE Leap 15.1 libuwac0-0-2.1.2-lp151.5.6.1 as a component of openSUSE Leap 15.1 libwinpr2-2.1.2-lp151.5.6.1 as a component of openSUSE Leap 15.1 uwac0-0-devel-2.1.2-lp151.5.6.1 as a component of openSUSE Leap 15.1 winpr2-devel-2.1.2-lp151.5.6.1 as a component of openSUSE Leap 15.1 freerdp-2.1.2-bp153.1.35 as a component of openSUSE Leap 15.3 libfreerdp2-2.1.2-bp153.1.35 as a component of openSUSE Leap 15.3 libwinpr2-2.1.2-bp153.1.35 as a component of openSUSE Leap 15.3 freerdp-2.4.0-150400.1.12 as a component of openSUSE Leap 15.4 libfreerdp2-2.4.0-150400.1.12 as a component of openSUSE Leap 15.4 libwinpr2-2.4.0-150400.1.12 as a component of openSUSE Leap 15.4 freerdp-2.4.0-2.1 as a component of openSUSE Tumbleweed freerdp-devel-2.4.0-2.1 as a component of openSUSE Tumbleweed freerdp-proxy-2.4.0-2.1 as a component of openSUSE Tumbleweed freerdp-server-2.4.0-2.1 as a component of openSUSE Tumbleweed freerdp-wayland-2.4.0-2.1 as a component of openSUSE Tumbleweed libfreerdp2-2.4.0-2.1 as a component of openSUSE Tumbleweed libuwac0-0-2.4.0-2.1 as a component of openSUSE Tumbleweed libwinpr2-2.4.0-2.1 as a component of openSUSE Tumbleweed uwac0-0-devel-2.4.0-2.1 as a component of openSUSE Tumbleweed winpr2-devel-2.4.0-2.1 as a component of openSUSE Tumbleweed In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2. CVE-2020-11097 SUSE Liberty Linux 8:freerdp-2.2.0-1.el8 SUSE Liberty Linux 8:freerdp-devel-2.2.0-1.el8 SUSE Liberty Linux 8:freerdp-libs-2.2.0-1.el8 SUSE Liberty Linux 8:libwinpr-2.2.0-1.el8 SUSE Liberty Linux 8:libwinpr-devel-2.2.0-1.el8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:freerdp-server-2.1.2-15.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:freerdp-wayland-2.1.2-15.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:libuwac0-0-2.1.2-15.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:uwac0-0-devel-2.1.2-15.7.1 SUSE Linux Enterprise Server 16.0:freerdp-3.10.3-160000.2.2 SUSE Linux Enterprise Server 16.0:freerdp-devel-3.10.3-160000.2.2 SUSE Linux Enterprise Server 16.0:freerdp-proxy-3.10.3-160000.2.2 SUSE Linux Enterprise Server 16.0:freerdp-proxy-plugins-3.10.3-160000.2.2 SUSE Linux Enterprise Server 16.0:freerdp-sdl-3.10.3-160000.2.2 SUSE Linux Enterprise Server 16.0:freerdp-server-3.10.3-160000.2.2 SUSE Linux Enterprise Server 16.0:freerdp-wayland-3.10.3-160000.2.2 SUSE Linux Enterprise Server 16.0:libfreerdp-server-proxy3-3-3.10.3-160000.2.2 SUSE Linux Enterprise Server 16.0:libfreerdp3-3-3.10.3-160000.2.2 SUSE Linux Enterprise Server 16.0:librdtk0-0-3.10.3-160000.2.2 SUSE Linux Enterprise Server 16.0:libuwac0-0-3.10.3-160000.2.2 SUSE Linux Enterprise Server 16.0:libwinpr3-3-3.10.3-160000.2.2 SUSE Linux Enterprise Server 16.0:winpr-devel-3.10.3-160000.2.2 SUSE Linux Enterprise Software Development Kit 12 SP5:freerdp-devel-2.1.2-12.20.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libfreerdp2-2.1.2-12.20.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libwinpr2-2.1.2-12.20.1 SUSE Linux Enterprise Software Development Kit 12 SP5:winpr2-devel-2.1.2-12.20.1 SUSE Linux Enterprise Workstation Extension 12 SP5:freerdp-2.1.2-12.20.1 SUSE Linux Enterprise Workstation Extension 12 SP5:freerdp-proxy-2.1.2-12.20.1 SUSE Linux Enterprise Workstation Extension 12 SP5:freerdp-server-2.1.2-12.20.1 SUSE Linux Enterprise Workstation Extension 12 SP5:libfreerdp2-2.1.2-12.20.1 SUSE Linux Enterprise Workstation Extension 12 SP5:libwinpr2-2.1.2-12.20.1 SUSE Linux Enterprise Workstation Extension 12 SP5:vinagre-3.20.2-16.3.3 SUSE Linux Enterprise Workstation Extension 12 SP5:vinagre-lang-3.20.2-16.3.3 SUSE Linux Enterprise Workstation Extension 15 SP1:freerdp-2.1.2-10.15.1 SUSE Linux Enterprise Workstation Extension 15 SP1:freerdp-devel-2.1.2-10.15.1 SUSE Linux Enterprise Workstation Extension 15 SP1:libfreerdp2-2.1.2-10.15.1 SUSE Linux Enterprise Workstation Extension 15 SP1:libwinpr2-2.1.2-10.15.1 SUSE Linux Enterprise Workstation Extension 15 SP1:winpr2-devel-2.1.2-10.15.1 SUSE Linux Enterprise Workstation Extension 15 SP2:freerdp-2.1.2-15.7.1 SUSE Linux Enterprise Workstation Extension 15 SP2:freerdp-devel-2.1.2-15.7.1 SUSE Linux Enterprise Workstation Extension 15 SP2:libfreerdp2-2.1.2-15.7.1 SUSE Linux Enterprise Workstation Extension 15 SP2:libwinpr2-2.1.2-15.7.1 SUSE Linux Enterprise Workstation Extension 15 SP2:winpr2-devel-2.1.2-15.7.1 SUSE Linux Enterprise Workstation Extension 15 SP3:freerdp-2.1.2-15.7.1 SUSE Linux Enterprise Workstation Extension 15 SP3:freerdp-devel-2.1.2-15.7.1 SUSE Linux Enterprise Workstation Extension 15 SP3:freerdp-proxy-2.1.2-15.7.1 SUSE Linux Enterprise Workstation Extension 15 SP3:libfreerdp2-2.1.2-15.7.1 SUSE Linux Enterprise Workstation Extension 15 SP3:libwinpr2-2.1.2-15.7.1 SUSE Linux Enterprise Workstation Extension 15 SP3:winpr2-devel-2.1.2-15.7.1 SUSE Linux Enterprise Workstation Extension 15 SP4:freerdp-2.4.0-150400.1.12 SUSE Linux Enterprise Workstation Extension 15 SP4:freerdp-devel-2.4.0-150400.1.12 SUSE Linux Enterprise Workstation Extension 15 SP4:freerdp-proxy-2.4.0-150400.1.12 SUSE Linux Enterprise Workstation Extension 15 SP4:libfreerdp2-2.4.0-150400.1.12 SUSE Linux Enterprise Workstation Extension 15 SP4:libwinpr2-2.4.0-150400.1.12 SUSE Linux Enterprise Workstation Extension 15 SP4:winpr2-devel-2.4.0-150400.1.12 openSUSE Leap 15.1:freerdp-2.1.2-lp151.5.6.1 openSUSE Leap 15.1:freerdp-devel-2.1.2-lp151.5.6.1 openSUSE Leap 15.1:freerdp-proxy-2.1.2-lp151.5.6.1 openSUSE Leap 15.1:freerdp-server-2.1.2-lp151.5.6.1 openSUSE Leap 15.1:freerdp-wayland-2.1.2-lp151.5.6.1 openSUSE Leap 15.1:libfreerdp2-2.1.2-lp151.5.6.1 openSUSE Leap 15.1:libuwac0-0-2.1.2-lp151.5.6.1 openSUSE Leap 15.1:libwinpr2-2.1.2-lp151.5.6.1 openSUSE Leap 15.1:uwac0-0-devel-2.1.2-lp151.5.6.1 openSUSE Leap 15.1:winpr2-devel-2.1.2-lp151.5.6.1 openSUSE Leap 15.3:freerdp-2.1.2-bp153.1.35 openSUSE Leap 15.3:libfreerdp2-2.1.2-bp153.1.35 openSUSE Leap 15.3:libwinpr2-2.1.2-bp153.1.35 openSUSE Leap 15.4:freerdp-2.4.0-150400.1.12 openSUSE Leap 15.4:libfreerdp2-2.4.0-150400.1.12 openSUSE Leap 15.4:libwinpr2-2.4.0-150400.1.12 openSUSE Tumbleweed:freerdp-2.4.0-2.1 openSUSE Tumbleweed:freerdp-devel-2.4.0-2.1 openSUSE Tumbleweed:freerdp-proxy-2.4.0-2.1 openSUSE Tumbleweed:freerdp-server-2.4.0-2.1 openSUSE Tumbleweed:freerdp-wayland-2.4.0-2.1 openSUSE Tumbleweed:libfreerdp2-2.4.0-2.1 openSUSE Tumbleweed:libuwac0-0-2.4.0-2.1 openSUSE Tumbleweed:libwinpr2-2.4.0-2.1 openSUSE Tumbleweed:uwac0-0-devel-2.4.0-2.1 openSUSE Tumbleweed:winpr2-devel-2.4.0-2.1 moderate 5.5 AV:N/AC:L/Au:S/C:P/I:N/A:P 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L