CVE-2018-8796: High severity rdesktop RDesktop vulnerability
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function processbitmapupdates() that results in a Denial of Service (segfault).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/rdesktopto a version that resolves this vulnerability.Fixed in 1.8.6-2Fixed in 1.9.0-2 - Upgrade
Upgrade
alpine/rdesktopto a version that resolves this vulnerability.Fixed in 1.8.6-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2018-8796?
CVE-2018-8796 is classified as a Denial of Service vulnerability due to an Out-Of-Bounds Read in rdesktop.
How do I fix CVE-2018-8796?
To fix CVE-2018-8796, upgrade rdesktop to version 1.8.6-2 or higher, or 1.9.0-2 or higher.
Which versions of rdesktop are affected by CVE-2018-8796?
All versions of rdesktop up to and including 1.8.3 are affected by CVE-2018-8796.
What consequences can occur due to CVE-2018-8796?
Exploitation of CVE-2018-8796 can lead to a Denial of Service condition resulting in a segmentation fault.
Is CVE-2018-8796 specific to certain operating systems?
CVE-2018-8796 primarily affects rdesktop on Debian versions 8.0 and 9.0.