CVE-2020-11041

In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend (alsa, oss, pulse, ...). The most likely outcome is a crash of the client instance followed by no or distorted sound or a session disconnect. If a user cannot upgrade to the patched version, a workaround is to disable sound for the session. This has been patched in 2.1.0.

• CWE-129
• CWE-129

• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.htmlThird Party Advisory
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-w67c-26c4-2h9wThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/10/msg00008.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.htmlThird Party Advisory
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-w67c-26c4-2h9wThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/10/msg00008.htmlMailing List, Third Party Advisory

Published

May 29, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11036In GLPI before version 9.4.6 there are multiple related stor…5.4
• CVE-2020-11037In Wagtail before versions 2.7.3 and 2.8.2, a potential timi…4.7
• CVE-2020-11038In FreeRDP less than or equal to 2.0.0, an Integer Overflow …5.4
• CVE-2020-11039In FreeRDP less than or equal to 2.0.0, when using a manipul…6.8
• CVE-2020-1104A spoofing vulnerability exists when Microsoft SharePoint Se…5.4
• CVE-2020-11040In FreeRDP less than or equal to 2.0.0, there is an out-of-b…2.7
• CVE-2020-11042In FreeRDP greater than 1.1 and before 2.0.0, there is an ou…5.9
• CVE-2020-11043In FreeRDP less than or equal to 2.0.0, there is an out-of-b…2.7
• CVE-2020-11044In FreeRDP greater than 1.2 and before 2.0.0, a double free …2.2
• CVE-2020-11045In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bo…3.3
• CVE-2020-11046In FreeRDP after 1.0 and before 2.0.0, there is a stream out…2.2
• CVE-2020-11047In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bo…5.9