CVE-2020-11087: 
NixOS vulnerability analysis and mitigation

CVE-2020-11087 affects FreeRDP versions less than or equal to 2.0.0, where there is an out-of-bound read vulnerability in the ntlm_read_AuthenticateMessage function. The vulnerability was discovered and disclosed in March 2020, and was fixed in version 2.1.0 (GitHub Advisory).

The vulnerability is an out-of-bounds read issue in the ntlm_read_AuthenticateMessage function of FreeRDP's NTLM authentication implementation. The issue affects all clients and servers using NTLM authentication. The vulnerability has been assessed as having a Low severity impact due to a subsequent check that triggers an error condition (GitHub Advisory).

The impact of this vulnerability is relatively low as it primarily affects the authentication process and can lead to a program crash. All clients and servers using NTLM authentication are potentially affected, though the actual impact is limited due to built-in error handling mechanisms (GitHub Advisory).

The vulnerability requires an attacker to manipulate the NTLM authentication process. The exploitability is limited as a following check triggers an error condition, preventing more severe exploitation scenarios (GitHub Advisory).

The vulnerability has been fixed in FreeRDP version 2.1.0. Users are recommended to upgrade to this version or later to address the issue. No specific workarounds are available for this vulnerability (GitHub Advisory, OpenSUSE Security).