CVE-2018-8795: Buffer Overflow
Published Feb 5, 2019
·Updated
rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in function processbitmapupdates() and results in a memory corruption and probably even a remote code execution.
Affected Software
5 affected componentsFixes available
debian/rdesktop
1.8.6-21.9.0-2
rdesktop RDesktop<=1.8.3
Debian Debian Linux=8.0
Debian Debian Linux=9.0
openSUSE Leap=15.1
Remediation
Event History
Feb 5, 2019
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-8795?
CVE-2018-8795 is considered a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2018-8795?
To fix CVE-2018-8795, upgrade rdesktop to version 1.8.6-2 or 1.9.0-2 or later.
3
Which versions of rdesktop are affected by CVE-2018-8795?
CVE-2018-8795 affects rdesktop versions up to and including 1.8.3.
4
Can CVE-2018-8795 lead to data loss?
Yes, CVE-2018-8795 can potentially lead to memory corruption and subsequent data loss.
5
What platforms are impacted by CVE-2018-8795?
CVE-2018-8795 affects rdesktop on Debian 8.0 and 9.0, as well as openSUSE Leap 15.1.