p PatchFirst

CVE-2019-15682

CVE-2019-15682

This page contains facts from public vulnerability sources. Check the original advisory before updating.

RDesktop version 1.8.4 contains multiple out-of-bound access read vulnerabilities in its code, which results in a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. These issues have been fixed in version 1.8.5

CVSS 7.5 · High · EPSS 1.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • rdesktop

    Versions
    • 1.8.4: Affected

    No fix published

  • rdesktop Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.8.6-1

    Update to 1.8.6-1

  • rdesktop Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.8.6-1

    Update to 1.8.6-1

  • rdesktop Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.8.6-1

    Update to 1.8.6-1

  • rdesktop Ubuntu:16.04:LTS

    Versions
    • 1.8.3-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • rdesktop Ubuntu:18.04:LTS

    Versions
    • 1.8.3-2
    • 1.8.3-2build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →