CVE-2020-11039

In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled (nearly) arbitrary memory can be read and written due to integer overflows in length checks. This has been patched in 2.1.0.

• CWE-190
• CWE-190

• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.htmlThird Party Advisory
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mx9p-f6q8-mqwqThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/10/msg00008.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.htmlThird Party Advisory
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mx9p-f6q8-mqwqThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/10/msg00008.htmlMailing List, Third Party Advisory

Published

May 29, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11033In GLPI from version 9.1 and before version 9.4.6, any API u…7.2
• CVE-2020-11034In GLPI before version 9.4.6, there is a vulnerability that …6.1
• CVE-2020-11035In GLPI after version 0.83.3 and before version 9.4.6, the C…9.3
• CVE-2020-11036In GLPI before version 9.4.6 there are multiple related stor…5.4
• CVE-2020-11037In Wagtail before versions 2.7.3 and 2.8.2, a potential timi…4.7
• CVE-2020-11038In FreeRDP less than or equal to 2.0.0, an Integer Overflow …5.4
• CVE-2020-1104A spoofing vulnerability exists when Microsoft SharePoint Se…5.4
• CVE-2020-11040In FreeRDP less than or equal to 2.0.0, there is an out-of-b…2.7
• CVE-2020-11041In FreeRDP less than or equal to 2.0.0, an outside controlle…2.7
• CVE-2020-11042In FreeRDP greater than 1.1 and before 2.0.0, there is an ou…5.9
• CVE-2020-11043In FreeRDP less than or equal to 2.0.0, there is an out-of-b…2.7
• CVE-2020-11044In FreeRDP greater than 1.2 and before 2.0.0, a double free …2.2