CVE-2018-20175
Fixed in a distro release EPSS 4%
rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Reads in the file mcs.c and result in a Denial of Service (segfault).
Products: rdesktop, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | rdesktop | 1.8.6-r0 |
| Alpine 3.11 | rdesktop | 1.8.6-r0 |
| Alpine 3.12 | rdesktop | 1.8.6-r0 |
| Alpine 3.13 | rdesktop | 1.8.6-r0 |
| Alpine 3.14 | rdesktop | 1.8.6-r0 |
| Arch Linux | rdesktop | 1.8.4-1 |
| Debian 12 | rdesktop | 1.8.4-1 |
| Debian 13 | rdesktop | 1.8.4-1 |
| Debian 14 | rdesktop | 1.8.4-1 |
| Debian 8 | rdesktop | 1.8.4-0+deb8u1 |
| Debian 9 | rdesktop | 1.8.4-1~deb9u1 |
| SUSE Package Hub 15 SP1 | rdesktop | 1.8.6-bp151.2.3.1 |
| Ubuntu 16.04 LTS | rdesktop | no fix |
| Ubuntu 18.04 LTS | rdesktop | no fix |
| openSUSE Leap 15.1 | rdesktop | 1.8.6-bp151.2.3.1 |
| openSUSE Tumbleweed | rdesktop | 1.9.0-4.6 |