In FreeRDP less than or equal to 2.0.0, by providing manipulated input a malicious client can create a double free condition and crash the server. This is fixed in version 2.1.0.
The product calls free() twice on the same memory address.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Freerdp | Freerdp | * | 2.1.0 (excluding) |
| Freerdp | Ubuntu | trusty | * |
| Freerdp2 | Ubuntu | bionic | * |
| Freerdp2 | Ubuntu | eoan | * |
| Freerdp2 | Ubuntu | esm-infra/bionic | * |
| Freerdp2 | Ubuntu | esm-infra/focal | * |
| Freerdp2 | Ubuntu | focal | * |
| Freerdp2 | Ubuntu | trusty | * |
| Freerdp2 | Ubuntu | upstream | * |