CVE-2018-8793
rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function cssp_read_tsrequest() that results in a memory corruption and probably even a remote code execution.
- Update to 1.8.4-1
Published Updated
PatchFirst · Latest vulnerabilities
rdesktop vulnerabilities · Page 2
Vulnerabilities published for rdesktop in the last 30 days: 3. Listed in the KEV catalogue: 0.
Vulnerabilities: 27
CVE-2018-8792
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that results in a Denial of Service (segfault).
- Update to 1.8.4-1
Published UpdatedCVE-2018-8791
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdr_process() that results in an information leak.
- Update to 1.8.4-1
Published UpdatedCVE-2011-1595
Directory traversal vulnerability in the disk_create function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. (dot dot) in a pathname.
- Update to 1.7.0-1
Published UpdatedCVE-2008-1803
Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow. NOTE: the role of the channel_process function was not specified by the original researcher.
- Update to 1.5.0-4+cvs20071006
Published UpdatedCVE-2008-1802
Buffer overflow in the process_redirect_pdu (rdp.c) function in rdesktop 1.5.0 allows remote attackers to execute arbitrary code via a Remote Desktop Protocol (RDP) redirect request with modified length fields.
- Update to 1.5.0-4+cvs20071006
Published UpdatedCVE-2008-1801
Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Remote Desktop Protocol (RDP) request with a small length field.
- Update to 1.5.0-4+cvs20071006
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.