CVE-2020-13397

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.1.1

Description An out-of-bounds read issue has been detected in the security fips decrypt function in libfreerdp/core/security.c due to an uninitialized value. This issue affects the security of the software.

Recommendations For versions prior to 2.1.1, update to version 2.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the security fips decrypt function in libfreerdp/core/security.c until a patch is available.