CVE-2018-20177: Buffer Overflow
Published Mar 15, 2019
·Updated
rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in the function rdpinunistr() and results in memory corruption and possibly even a remote code execution.
Affected Software
6 affected componentsFixes available
debian/rdesktop
1.8.6-21.9.0-2
rdesktop RDesktop<=1.8.3
Debian Debian Linux=8.0
Debian Debian Linux=9.0
openSUSE Backports=sle-15-sp1
openSUSE Leap=15.1
Remediation
Event History
Mar 15, 2019
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20177?
CVE-2018-20177 is considered a high severity vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2018-20177?
To fix CVE-2018-20177, update to rdesktop version 1.8.6-2 or 1.9.0-2 or later.
3
Which versions of rdesktop are affected by CVE-2018-20177?
All versions of rdesktop up to and including v1.8.3 are affected by CVE-2018-20177.
4
What type of vulnerability is CVE-2018-20177?
CVE-2018-20177 is an integer overflow vulnerability that leads to a heap-based buffer overflow.
5
Can CVE-2018-20177 lead to memory corruption?
Yes, CVE-2018-20177 can lead to memory corruption and possibly allow for remote code execution.