CVE-2018-20178: High severity ubuntu desktop file utils vulnerability
Published Mar 15, 2019
·Updated
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function processdemandactive() that results in a Denial of Service (segfault).
Affected Software
4 affected componentsFixes available
debian/rdesktop
1.8.6-21.9.0-2
rdesktop RDesktop<=1.8.3
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Remediation
Event History
Mar 15, 2019
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20178?
CVE-2018-20178 is classified as a Denial of Service vulnerability due to an Out-Of-Bounds Read that can lead to a segfault.
2
How do I fix CVE-2018-20178?
To fix CVE-2018-20178, update rdesktop to version 1.8.6-2 or 1.9.0-2 or later.
3
Which versions of rdesktop are affected by CVE-2018-20178?
CVE-2018-20178 affects rdesktop versions up to and including 1.8.3.
4
What is the impact of CVE-2018-20178?
The impact of CVE-2018-20178 is a Denial of Service, where the service can crash due to a segfault.
5
Is CVE-2018-20178 specific to any operating systems?
CVE-2018-20178 specifically affects Debian Linux versions 8.0 and 9.0 when using vulnerable rdesktop versions.