CVE-2020-11087

MEDIUM 5.4CVE-2020-11087 · Published 29/05/2020 · updated 17/06/2026

In short

CVE-2020-11087 is a MEDIUM (CVSS 5.4) vulnerability affecting freerdp (freerdp).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 73.0% of all vulnerabilities.
Fix: update to 2.1.0 or later.

Package	Affected versions	Patched versions
freerdp freerdp	`< 2.1.0`	`2.1.0`

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_AuthenticateMessage. This has been fixed in 2.1.0.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 2.1.0

2.1.0

More vulnerabilities in freerdp

See all →