CVE-2018-20176: High severity ubuntu desktop file utils vulnerability
Published Mar 15, 2019
·Updated
rdesktop versions up to and including v1.8.3 contain several Out-Of- Bounds Reads in the file secure.c that result in a Denial of Service (segfault).
Affected Software
2 affected componentsFixes available
debian/rdesktop
1.8.6-21.9.0-2
rdesktop RDesktop<=1.8.3
Remediation
Event History
Mar 15, 2019
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20176?
CVE-2018-20176 is considered a critical vulnerability due to its potential to cause Denial of Service via Out-Of-Bounds Reads.
2
How do I fix CVE-2018-20176?
To fix CVE-2018-20176, update rdesktop to versions 1.8.6-2 or 1.9.0-2 or later.
3
What versions of rdesktop are affected by CVE-2018-20176?
All rdesktop versions up to and including v1.8.3 are affected by CVE-2018-20176.
4
What type of vulnerability is CVE-2018-20176?
CVE-2018-20176 is classified as an Out-Of-Bounds Read vulnerability.
5
Can CVE-2018-20176 lead to data leakage?
While CVE-2018-20176 primarily results in a Denial of Service, Out-Of-Bounds Reads can potentially lead to information disclosure in certain scenarios.