CVE-2018-20175
CVE-2018-20175
This page contains facts from public vulnerability sources. Check the original advisory before updating.
rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Reads in the file mcs.c and result in a Denial of Service (segfault).
CVSS 7.5 · High · EPSS 4.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
rdesktop Debian:12
- Affected ranges
- ECOSYSTEM: < 1.8.4-1
Update to 1.8.4-1
rdesktop Debian:13
- Affected ranges
- ECOSYSTEM: < 1.8.4-1
Update to 1.8.4-1
rdesktop Debian:14
- Affected ranges
- ECOSYSTEM: < 1.8.4-1
Update to 1.8.4-1
rdesktop Ubuntu:16.04:LTS
- Versions
- 1.8.3-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rdesktop Ubuntu:18.04:LTS
- Versions
- 1.8.3-2
- 1.8.3-2build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- http://www.securityfocus.com/bid/106938
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- https://security.gentoo.org/glsa/201903-06
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- https://www.debian.org/security/2019/dsa-4394
- https://lists.debian.org/debian-lts-announce/2019/02/msg00030.html
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html
- https://nvd.nist.gov/vuln/detail/CVE-2018-20175