CVE-2020-11089

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-11089
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-11089.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2020-11089
Downstream
Related
Published
2020-05-29T20:15:11.017Z
Modified
2026-02-24T11:33:42.234189Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L CVSS Calculator
Summary
[none]
Details

In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions (parallelprocessirpcreate, serialprocessirpcreate, driveprocessirpwrite, printerprocessirpwrite, rdpeirecvpdu, serialprocessirp_write). This has been fixed in 2.1.0.

References

Affected packages

Git / gitlab.gnome.org/GNOME/libxml2

Affected ranges

Type
GIT
Repo
https://gitlab.gnome.org/GNOME/libxml2
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
c230410eadbada15092c04f92d01068af8a19f8d

Affected versions

Other
EAZEL-NAUTILUS-MS-AUG07
FOR_GNOME_0_99_1
GNOME_0_30
GNUMERIC_FIRST_PUBLIC_RELEASE
LIBXML_0_99
LIBXML_1_5_0
LIBXML_1_8_5
LIBXML_1_8_6
LIBXML_2_0_0
LIBXML_TEST_2_0_0
LIB_XML_1_1
LIB_XML_1_3
LIB_XML_1_4
LIB_XML_1_6_1
LIB_XML_1_6_2
LIB_XML_1_7_0
LIB_XML_1_7_1
LIB_XML_1_7_3
LIB_XML_1_8_3
LIB_XML_1_X

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-11089.json"
vanir_signatures 
[
    {
        "source": "https://gitlab.gnome.org/GNOME/libxml2@c230410eadbada15092c04f92d01068af8a19f8d",
        "digest": {
            "length": 289.0,
            "function_hash": "217067580253948699484829138099054328869"
        },
        "deprecated": false,
        "signature_type": "Function",
        "target": {
            "function": "main",
            "file": "example/gjobread.c"
        },
        "signature_version": "v1",
        "id": "CVE-2020-11089-4fa8ca34"
    },
    {
        "source": "https://gitlab.gnome.org/GNOME/libxml2@c230410eadbada15092c04f92d01068af8a19f8d",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "287042595298680527861991348108261089809",
                "169182630361917727940441134910200921263",
                "198842561615446092675493735186734618685"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "target": {
            "file": "example/gjobread.c"
        },
        "signature_version": "v1",
        "id": "CVE-2020-11089-eabbf092"
    }
]