CVE-2018-20181
Fixed in a distro release EPSS 8%
rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function seamless_process() and results in memory corruption and probably even a remote code execution.
Products: rdesktop, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | rdesktop | 1.8.6-r0 |
| Alpine 3.11 | rdesktop | 1.8.6-r0 |
| Alpine 3.12 | rdesktop | 1.8.6-r0 |
| Alpine 3.13 | rdesktop | 1.8.6-r0 |
| Alpine 3.14 | rdesktop | 1.8.6-r0 |
| Arch Linux | rdesktop | 1.8.4-1 |
| Debian 12 | rdesktop | 1.8.4-1 |
| Debian 13 | rdesktop | 1.8.4-1 |
| Debian 14 | rdesktop | 1.8.4-1 |
| Debian 8 | rdesktop | 1.8.4-0+deb8u1 |
| Debian 9 | rdesktop | 1.8.4-1~deb9u1 |
| SUSE Package Hub 15 SP1 | rdesktop | 1.8.6-bp151.2.3.1 |
| Ubuntu 16.04 LTS | rdesktop | no fix |
| Ubuntu 18.04 LTS | rdesktop | no fix |
| openSUSE Leap 15.1 | rdesktop | 1.8.6-bp151.2.3.1 |
| openSUSE Tumbleweed | rdesktop | 1.9.0-4.6 |