CVE-2018-20175: High severity ubuntu desktop file utils vulnerability
Published Mar 15, 2019
·Updated
rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Reads in the file mcs.c and result in a Denial of Service (segfault).
Affected Software
4 affected componentsFixes available
debian/rdesktop
1.8.6-21.9.0-2
rdesktop RDesktop<=1.8.3
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Remediation
Event History
Mar 15, 2019
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20175?
CVE-2018-20175 is classified as a Denial of Service vulnerability leading to application crashes.
2
How do I fix CVE-2018-20175?
To remediate CVE-2018-20175, upgrade rdesktop to version 1.8.6-2 or later.
3
Which versions of rdesktop are affected by CVE-2018-20175?
rdesktop versions up to and including v1.8.3 are affected by CVE-2018-20175.
4
What are the potential impacts of CVE-2018-20175?
The exploit of CVE-2018-20175 can lead to out-of-bounds reads, resulting in application crashes.
5
Is there a way to mitigate CVE-2018-20175 if I cannot upgrade?
If upgrading is not possible for CVE-2018-20175, consider implementing network security measures to limit exposure.