Detections
Analytics
Alpine: multiple freerdp packages: security update to 2.0.0-r0
medium Tenable Self-Hosted Container Security Plugin ID 404494
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- libfreerdp/gdi/gdi.c in FreeRDP > 1.0 through 2.0.0-rc4 has an Out-of-bounds Read. (CVE-2020-11522)
- libfreerdp/codec/planar.c in FreeRDP version > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.
(CVE-2020-11521)
- libfreerdp/gdi/region.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Integer Overflow.
(CVE-2020-11523)
- libfreerdp/codec/interleaved.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.
(CVE-2020-11524)
See Also
https://security.alpinelinux.org/vuln/CVE-2020-11521
https://security.alpinelinux.org/vuln/CVE-2020-11522
https://security.alpinelinux.org/vuln/CVE-2020-11523
https://security.alpinelinux.org/vuln/CVE-2020-11524
Plugin Details
Severity: Medium
ID: 404494
Version: Revision 1.26
Type: Local
Published: 10/31/2023
Updated: 12/4/2025
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 57.15
CVSS v2
Risk Factor: Medium
Base Score: 6.4
Temporal Score: 5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:P
CVSS Score Source: CVE-2020-11522
CVSS v3
Risk Factor: Medium
Base Score: 6.6
Temporal Score: 5.9
Vector: CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
CVSS Score Source: CVE-2020-11524
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Vulnerability Publication Date: 5/15/2020
Reference Information
CVE: CVE-2020-11521, CVE-2020-11522, CVE-2020-11523, CVE-2020-11524, CVE-2020-11525, CVE-2020-11526