CVE-2020-11097: 
NixOS vulnerability analysis and mitigation

CVE-2020-11097 affects FreeRDP versions before 2.1.2, where an out of bounds read vulnerability occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. The vulnerability was discovered by Antonio Morales from GitHub Security Lab (GHSL) and was fixed in version 2.1.2 released on June 22, 2020 (FreeRDP Release, GitHub Advisory).

The vulnerability is an out-of-bounds read issue in the ntlm_av_pair_get function. The bug occurs when accessing memory locations outside the boundaries of a static array, which could lead to unauthorized memory access. The vulnerability has been assigned a CVSS v3 score of 5.4 (Medium), indicating moderate severity (Ubuntu CVE).

The vulnerability primarily affects FreeRDP clients and could result in a denial of service condition. When exploited, it could cause the application to crash due to accessing invalid memory locations (Debian Tracker).

The vulnerability requires low attack complexity and low privileges to exploit, but does require network access. There is no evidence of this vulnerability being exploited in the wild (Red Hat CVE).

The primary mitigation is to upgrade to FreeRDP version 2.1.2 or later, which contains the fix for this vulnerability. The fix was implemented through a code change that adds proper boundary checks for array access (OpenSUSE Update).