rdesktop vulnerabilities and fixes

Recent CVEs affecting rdesktop, with upgrade or downgrade steps. 20 tracked.

rdesktop has 20 tracked vulnerabilities, 10 critical. A fixed release or vendor patch exists for 19. Most recent: 2019-10-30. Highest priority: CVE-2018-20182 (score 73/100).

• CVE-2019-15682 HIGH 7.5 DOWNGRADE RDesktop version 1.8.4 contains multiple out-of-bound access read vulnerabilities in its code, which results i
• CVE-2018-8800 CRITICAL 9.8 UPGRADE MITIGATE rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function ui_clip_handle_d
• CVE-2018-8799 HIGH 7.5 UPGRADE MITIGATE rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_secondary_order
• CVE-2018-8798 HIGH 7.5 UPGRADE MITIGATE rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsnd_process_ping() t
• CVE-2018-8797 CRITICAL 9.8 UPGRADE MITIGATE rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function process_plane()
• CVE-2018-8796 HIGH 7.5 UPGRADE MITIGATE rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_bitmap_updates(
• CVE-2018-8795 CRITICAL 9.8 UPGRADE MITIGATE rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Ove
• CVE-2018-8794 CRITICAL 9.8 UPGRADE MITIGATE rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to an Out-Of-Bounds Write
• CVE-2018-8793 CRITICAL 9.8 UPGRADE MITIGATE rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function cssp_read_tsrequ
• CVE-2018-8792 HIGH 7.5 UPGRADE MITIGATE rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() t
• CVE-2018-8791 HIGH 7.5 UPGRADE MITIGATE rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdr_process() that re
• CVE-2018-20182 CRITICAL 9.8 UPGRADE MITIGATE rdesktop versions up to and including v1.8.3 contain a Buffer Overflow over the global variables in the functi
• CVE-2018-20181 CRITICAL 9.8 UPGRADE MITIGATE rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Ov
• CVE-2018-20180 CRITICAL 9.8 UPGRADE MITIGATE rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Ov
• CVE-2018-20179 CRITICAL 9.8 UPGRADE rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Ov
• CVE-2018-20178 HIGH 7.5 UPGRADE MITIGATE rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function process_demand_acti
• CVE-2018-20177 CRITICAL 9.8 UPGRADE MITIGATE rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Ove
• CVE-2018-20176 HIGH 7.5 UPGRADE rdesktop versions up to and including v1.8.3 contain several Out-Of- Bounds Reads in the file secure.c that re
• CVE-2018-20175 HIGH 7.5 UPGRADE MITIGATE rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bo
• CVE-2018-20174 HIGH 7.5 UPGRADE rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function ui_clip_handle_data

FAQ

How do I fix rdesktop vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is rdesktop being exploited right now?

None of the tracked rdesktop CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which rdesktop CVE should I patch first?

CVE-2018-20182 currently ranks highest (73/100): rdesktop versions up to and including v1.8.3 contain a Buffer Overflow over the global variables in the functi.

RSS feed for rdesktop · ← Back to latest CVEs