CVE-2018-20179: Integer Underflow
Published Mar 15, 2019
·Updated
rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function lspciprocess() and results in memory corruption and probably even a remote code execution.
Affected Software
2 affected componentsFixes available
debian/rdesktop
1.8.6-21.9.0-2
rdesktop RDesktop<=1.8.3
Remediation
Event History
Mar 15, 2019
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20179?
CVE-2018-20179 has a high severity rating due to its potential for remote code execution and memory corruption.
2
How do I fix CVE-2018-20179?
To fix CVE-2018-20179, upgrade rdesktop to version 1.8.6-2 or later, or 1.9.0-2 or later if applicable.
3
Which versions of rdesktop are affected by CVE-2018-20179?
CVE-2018-20179 affects all versions of rdesktop up to and including version 1.8.3.
4
Can CVE-2018-20179 lead to data theft?
Yes, CVE-2018-20179 could potentially allow attackers to gain access to sensitive data through remote code execution.
5
Is CVE-2018-20179 a local or remote vulnerability?
CVE-2018-20179 is a remote vulnerability, enabling attackers to exploit the system without local access.