Impact

• Out of bound read in ntlm_read_AuthenticateMessage
• All clients and servers using NTLM authentication are affected
• Low impact due to a following check triggering an error

Patches

8241ab4 Fixed with 2.1.0 and newer

Workarounds

None

References

• https://pub.freerdp.com/cve/CVE-2020-11087