CVE-2020-11043: 
NixOS vulnerability analysis and mitigation

CVE-2020-11043 is a security vulnerability discovered in FreeRDP, a free implementation of the Remote Desktop Protocol (RDP). The vulnerability was identified as an out-of-bounds read in rfx_process_message_tileset function, affecting FreeRDP versions less than or equal to 2.0.0 (OpenSUSE Security, RedHat Security).

The vulnerability manifests as an out-of-bounds read in the rfx_process_message_tileset function when processing RFX decoder data. When invalid data is fed to the RFX decoder, it results in garbage being displayed on screen as colors (GitHub Advisory).

The impact of this vulnerability is relatively low, primarily resulting in display corruption where invalid data is visualized as incorrect colors on the screen. The vulnerability affects all FreeRDP clients across all platforms (GitHub Advisory).

The vulnerability can be triggered when processing RFX decoder data, specifically when using /rfx, /gfx or /network:auto command line switches (GitHub Advisory).

The vulnerability was patched in FreeRDP version 2.1.0. As a workaround, users can avoid using the /rfx, /gfx or /network:auto command line switches (GitHub Advisory, RedHat Security).