CVE-2020-11047

Name: CVE-2020-11047
Creator: NVD / NIST
Published: 2020-05-07T20:15:12.127+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

MEDIUMCVSS 5.9/10EPSS 1.71%

Last modified Jun 17, 2026

CVE-2020-11047 is a medium-severity vulnerability rated 5.9/10 on the CVSS scale. In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bounds read in autodetect_recv_bandwidth_measure_results. A malicious server can extract up to 8 bytes of client memory with a manipulated message by providing a short input and reading the measurement result data. EPSS estimates a 1.71% chance of exploitation in the next 30 days.

Description

In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bounds read in autodetect_recv_bandwidth_measure_results. A malicious server can extract up to 8 bytes of client memory with a manipulated message by providing a short input and reading the measurement result data. This has been patched in 2.0.0.

Metrics

CVSS 3.1

5.9/10

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H

EPSS Probability

1.71%

74.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Freerdp	Freerdp	> 1.1.0, < 2.0.0
Canonical	Ubuntu Linux	18.04
Canonical	Ubuntu Linux	19.10
Canonical	Ubuntu Linux	20.04
Debian	Debian Linux	10.0

References

https://github.com/FreeRDP/FreeRDP/commit/f5e73cc7c9cd973b516a618da877c87b80950b65Patch, Third Party Advisory
https://github.com/FreeRDP/FreeRDP/issues/6009Exploit, Third Party Advisory
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9fw6-m2q8-h5pwThird Party Advisory
https://lists.debian.org/debian-lts-announce/2023/10/msg00008.htmlMailing List, Third Party Advisory
https://usn.ubuntu.com/4379-1/Third Party Advisory
https://github.com/FreeRDP/FreeRDP/commit/f5e73cc7c9cd973b516a618da877c87b80950b65Patch, Third Party Advisory
https://github.com/FreeRDP/FreeRDP/issues/6009Exploit, Third Party Advisory
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9fw6-m2q8-h5pwThird Party Advisory
https://lists.debian.org/debian-lts-announce/2023/10/msg00008.htmlMailing List, Third Party Advisory
https://usn.ubuntu.com/4379-1/Third Party Advisory

Timeline

Published: May 7, 2020
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2020-11047?

How severe is CVE-2020-11047?

CVE-2020-11047 has a CVSS score of 5.9/10 (MEDIUM severity). The EPSS model estimates a 1.71% probability of exploitation in the next 30 days.

How do I fix CVE-2020-11047?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2020-11047?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST