CVE-2018-20181: Buffer Overflow
Published Mar 15, 2019
·Updated
rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function seamlessprocess() and results in memory corruption and probably even a remote code execution.
Affected Software
4 affected componentsFixes available
debian/rdesktop
1.8.6-21.9.0-2
rdesktop RDesktop<=1.8.3
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Remediation
Event History
Mar 15, 2019
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20181?
CVE-2018-20181 is classified as a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2018-20181?
To fix CVE-2018-20181, upgrade rdesktop to version 1.8.6-2 or 1.9.0-2.
3
What versions of rdesktop are affected by CVE-2018-20181?
rdesktop versions up to and including 1.8.3 are affected by CVE-2018-20181.
4
What does CVE-2018-20181 exploit?
CVE-2018-20181 exploits an Integer Underflow leading to a Heap-Based Buffer Overflow and memory corruption.
5
Is remote code execution possible with CVE-2018-20181?
Yes, CVE-2018-20181 can result in remote code execution due to the vulnerability present in rdesktop.