CVE-2020-11087

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2020-11087
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-11087.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2020-11087
Downstream
Related
Published
2020-05-29T20:15:10Z
Modified
2025-09-19T11:36:14.341086Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L CVSS Calculator
Summary
[none]
Details

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlmreadAuthenticateMessage. This has been fixed in 2.1.0.

References

Affected packages

Git / github.com/freerdp/freerdp

Affected ranges

Type
GIT
Repo
https://github.com/freerdp/freerdp
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
8241ab42fdf0cc89cf69fc574bf6360c9977a0d4

Affected versions

1.*

1.0-beta1
1.0-beta2
1.0-beta3
1.0-beta4
1.0-beta5
1.0.0
1.0.1
1.1.0-beta+2013071101
1.1.0-beta1
1.1.0-beta1+android2
1.1.0-beta1+android3
1.1.0-beta1+android4
1.1.0-beta1+android5
1.1.0-beta1+ios1
1.1.0-beta1+ios2
1.1.0-beta1+ios3
1.1.0-beta1+ios4
1.2.0-beta1+android7
1.2.0-beta1+android9

2.*

2.0.0
2.0.0-beta1+android10
2.0.0-beta1+android11
2.0.0-rc0
2.0.0-rc1
2.0.0-rc2
2.0.0-rc3
2.0.0-rc4

Database specific 

{
    "vanir_signatures": [
        {
            "id": "CVE-2020-11087-4d56f382",
            "digest": {
                "length": 6341.0,
                "function_hash": "323716930376608716647377832147244238994"
            },
            "signature_type": "Function",
            "deprecated": false,
            "target": {
                "file": "winpr/libwinpr/sspi/NTLM/ntlm_message.c",
                "function": "ntlm_read_AuthenticateMessage"
            },
            "signature_version": "v1",
            "source": "https://github.com/freerdp/freerdp/commit/8241ab42fdf0cc89cf69fc574bf6360c9977a0d4"
        },
        {
            "id": "CVE-2020-11087-f908d808",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "154514318166335519574049377685409873258",
                    "56541073228512878616808342428086533156",
                    "161651536400387389871181437121023956494",
                    "211811431804190450677659699831454803476",
                    "295382713056045796778340193138038626325",
                    "276992700690353240360321429483627263581",
                    "138806139207652727465498310479651456571",
                    "278749379450094990387775363009510925691",
                    "241413464936548129503997645178197014903",
                    "30411643711945645815598947303704340527",
                    "339661838060147216225664927532669752921",
                    "133922056526047205639145996059903227230",
                    "68532566752706994136843909064010671536",
                    "304131632231906548921496171046306531778",
                    "67882167744274946674606458323381954716",
                    "121807398591422663603578373372885019896",
                    "253662455073028227159382901201324874617",
                    "111385606397311443666316341710094090228",
                    "102130564232632735527339562687623895148",
                    "11006258702244288486245773187479678531",
                    "74205178819293443848102321539429761466",
                    "253662455073028227159382901201324874617",
                    "312501569522021938152053614398069559351",
                    "98168397895482623504390908520550420877",
                    "117627523580040007016009315631784254027",
                    "314011867796071251342930867012647929853",
                    "244662915843780533572199619315750995590",
                    "253662455073028227159382901201324874617",
                    "174686487407518535509696959276533968595",
                    "239427991089082503098389597256809403251",
                    "33724994605980651017834831886549882202",
                    "164358783730812471173461857098172249776",
                    "244662915843780533572199619315750995590",
                    "253662455073028227159382901201324874617",
                    "201166722949810737187879871285367317983",
                    "249949584026904705042454117259771532465",
                    "196683094714095414160125404883075368945",
                    "260466164511542389587007361248825094720",
                    "253662455073028227159382901201324874617",
                    "323428085615289951860939594860197990528",
                    "131541879127304571214834482785127453148",
                    "8446251686585743229637268818340568032",
                    "103996748205276043571805998578244156008",
                    "253662455073028227159382901201324874617",
                    "228544139125987504589000920610065837109",
                    "236117061846471316865687652781394296627",
                    "254778563722473740048972977655769127247",
                    "304938498267846296685631809058007976055",
                    "253662455073028227159382901201324874617",
                    "68721091901326487661288802263901103083",
                    "187727687122777566716665464656245672789",
                    "76716247514145182233500530771454337423",
                    "132951234265639673915711190530189190236",
                    "244662915843780533572199619315750995590",
                    "253662455073028227159382901201324874617",
                    "125553016897872548207771638126188345197",
                    "150187513336340834753465668698033953966",
                    "208948704100297060610022153852978535373",
                    "274722474817140977116505144302812499570",
                    "250842374023437519868922881052830706402",
                    "45779165871585141370938961430733742079",
                    "11668046986392564375786790848727083845",
                    "122156914354461375210180735930759281141",
                    "253662455073028227159382901201324874617",
                    "63926046525700067898154360662491512743",
                    "229324638166040194753013467233623218125",
                    "139734374144708037125919670499225835851",
                    "232614083226558610815601275446320500753",
                    "6528800998010061828632523047093720207",
                    "198293103083158085166393109051800837141",
                    "253662455073028227159382901201324874617",
                    "321450999058637810535222367808907282124",
                    "42900884321040807565983816286398317705",
                    "121224227178259272233075738270673295606",
                    "196489480839964295787469285036203135035",
                    "90786100283805874210049656953796848292",
                    "16717625541532460009816958547667942930",
                    "22403996456231067067373353180918568504",
                    "145598177898448543383884230367024392777",
                    "13222721649571082529067686458067942018",
                    "211605321874173834158220053283370424647",
                    "134979684622246714513434620576927820854",
                    "22403996456231067067373353180918568504",
                    "246207011876176242020352619911965676689",
                    "240703831849212882616672407272991944112",
                    "240745115579393806267554647170182522614",
                    "241675326737785324093756427761370297118",
                    "22403996456231067067373353180918568504",
                    "104949350100721263125085305828183597995",
                    "233978408888539405578110558872926670550",
                    "179750850740817100481541789874758318749",
                    "304360824219610205673515898357785628045",
                    "85289164583278400144046241804581049589",
                    "22403996456231067067373353180918568504",
                    "322558151512957459299534849234313743916",
                    "184261764499893372990248445310371456419",
                    "191976415187374461648049678432978448559",
                    "191921137837496105374895311441883575312",
                    "85289164583278400144046241804581049589",
                    "22403996456231067067373353180918568504",
                    "82352513813789699389345125779190857440",
                    "119932755149428744155850767769393437618",
                    "191484239637562940985098941007368911445",
                    "46815914388692519416162241770889036168",
                    "161951019194278477929857201220550249749",
                    "186425153139679315952310294482846392769",
                    "316453102634686443952101406999990822926",
                    "36616512156431261482656976307408372757",
                    "102172305271217910653822640486853386827",
                    "22403996456231067067373353180918568504",
                    "80948364461329060192937305639493687949",
                    "213072126327002658363499619360350305158",
                    "38429710044080758485915941030506322698",
                    "117295542566946394961596785113956915651",
                    "196174300566754983061960566253389386822",
                    "272563553901084615855684391831694546890",
                    "143709003002470807945298515674467450668",
                    "129556815624869728747976358602876843137",
                    "154371492644357202537923291862393510017",
                    "72852919265872844141162240724849521675",
                    "118497478680621602106278070569346492826",
                    "234696324119093460368801125270654302795",
                    "85289164583278400144046241804581049589",
                    "22403996456231067067373353180918568504",
                    "304510621029493273474532992369478750308",
                    "74585422880968153809668040073975851661",
                    "11144158705062926999649801958073498764",
                    "69884830720015146667597333599505475347",
                    "226885259260921754369551347896931525118",
                    "83618653922054646947995034672438428867",
                    "253662455073028227159382901201324874617",
                    "223414785606981179076849053157060956549",
                    "32956767466003425107023088931155196646",
                    "39156160138601862363612520826126497801",
                    "185893991082219683248714946541531990070",
                    "59674959416409836500985609739051240668",
                    "22469809208479479408294288943005091214",
                    "22403996456231067067373353180918568504",
                    "11583215664584732026747536045610290768",
                    "106198836796427045018995615618927090784",
                    "53001384217291352936662513075794553259",
                    "190101201025833245442288381778414741658",
                    "313309393002342629773500538075404731352",
                    "234031056829139360422777395229473605100",
                    "50557167896935087143460297426701557932",
                    "253662455073028227159382901201324874617",
                    "208809639380305961018804431549322462879",
                    "87706621565962368399249085821525275618",
                    "251085397996317134810648371489196303894",
                    "98145398917848937212068238883182616901",
                    "117747777603796256591481692541516684869",
                    "244521677333975823892270362269904230088",
                    "156298833418999828687409685203336392883",
                    "162650266072802846803464401741298362854",
                    "22403996456231067067373353180918568504",
                    "241627117444334161744049415194429351173",
                    "222854894970348738675069231279978299978",
                    "297146069882352317858577471029366203453",
                    "98431425343492209492766820924004133354",
                    "199630960619385935638029402700823898567",
                    "73700629884199838290981677003813377712",
                    "22403996456231067067373353180918568504",
                    "172690674056621477251797713009409836607",
                    "4221347786307635465166641377379055471",
                    "285450915834911359032022236539347136773",
                    "41532746424712481815439544814212771219",
                    "34071731460786003810796844937636205349",
                    "203970205104222824289053029742670162691",
                    "73223257631344278879274576330480665205"
                ]
            },
            "signature_type": "Line",
            "deprecated": false,
            "target": {
                "file": "winpr/libwinpr/sspi/NTLM/ntlm_message.c"
            },
            "signature_version": "v1",
            "source": "https://github.com/freerdp/freerdp/commit/8241ab42fdf0cc89cf69fc574bf6360c9977a0d4"
        }
    ]
}