CVE-2020-4030
Global infos:
In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks due to an integer overflow. This is fixed in version 2.1.2.
CVE Status: Modified
References:
Metrics:
| Attribute | Value |
|---|---|
| Attack Complexity | HIGH |
| Attack Vector | NETWORK |
| Availability Impact | NONE |
| Base Score | 3.5 |
| Base Severity | LOW |
| Confidentiality Impact | NONE |
| Integrity Impact | LOW |
| Privileges Required | LOW |
| Scope | CHANGED |
| User Interaction | NONE |
| Vector String | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N |
| Exploitability Score | 1.8 |
| Impact Score | 1.4 |
| Source | [email protected] |
| Type | Secondary |