CVE-2019-15682
Fixed in a distro release EPSS 1%
RDesktop version 1.8.4 contains multiple out-of-bound access read vulnerabilities in its code, which results in a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. These issues have been fixed in version 1.8.5
Products: rdesktop
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | rdesktop | 1.8.6-1 |
| Debian 13 | rdesktop | 1.8.6-1 |
| Debian 14 | rdesktop | 1.8.6-1 |
| Debian 8 | rdesktop | 1.8.6-0+deb8u1 |
| Debian 9 | rdesktop | 1.8.6-2~deb9u1 |
| Ubuntu 16.04 LTS | rdesktop | no fix |
| Ubuntu 18.04 LTS | rdesktop | no fix |