Out-of-Bounds Read Vulnerabilities in rdesktop by rdesktop Developers
CVE-2018-20176

7.5HIGH

Key Information:

Vendor

Rdesktop

Status
Rdesktop
Vendor
CVE Published:
15 March 2019

What is CVE-2018-20176?

The software rdesktop has been identified with several vulnerabilities in versions up to and including 1.8.3. These vulnerabilities manifest as Out-Of-Bounds Reads within the secure.c file, which may lead to a Denial of Service through segmentation faults. This issue calls for immediate attention from users of the affected versions to ensure the security and stability of their systems. It is recommended to upgrade to patched versions to mitigate the risks presented by this vulnerability.

References

http://www.securityfocus.com/bid/106938
vdb-entryx_refsource_BID
https://github.com/rdesktop/rdesktop/commit/4dca546d04321...
x_refsource_MISC
https://security.gentoo.org/glsa/201903-06
vendor-advisoryx_refsource_GENTOO

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.