Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 27

Export CSV
CVE-2018-20180

rdesktop: Remote code execution in rdpsnddbg_process

rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function rdpsnddbg_process() and results in memory corruption and probably even a remote code execution.

CVSS 3.0 · 9.8 Critical EPSS 8.2% KEV · Not listed
Vendors
Debian Rdesktop
Products
Debian Linux Rdesktop
CVE-2018-20179

rdesktop: Remote code execution in lspci_process

rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function lspci_process() and results in memory corruption and probably even a remote code execution.

CVSS 3.0 · 9.8 Critical EPSS 6.8% KEV · Not listed
Vendors
Rdesktop
Products
Rdesktop
CVE-2018-20178

rdesktop: Denial of Service in process_demand_active

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function process_demand_active() that results in a Denial of Service (segfault).

CVSS 3.0 · 7.5 High EPSS 4.3% KEV · Not listed
Vendors
Debian Rdesktop
Products
Debian Linux Rdesktop
CVE-2018-20177

rdesktop: Memory corruption in rdp_in_unistr

rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in the function rdp_in_unistr() and results in memory corruption and possibly even a remote code execution.

CVSS 3.1 · 9.8 Critical EPSS 7.9% KEV · Not listed
Vendors
Debian Opensuse Rdesktop
Products
Debian Linux Backports Leap and 1 more
CVE-2018-20176

rdesktop: Denial of Service in sec_parse_crypt_info and sec_recv

rdesktop versions up to and including v1.8.3 contain several Out-Of- Bounds Reads in the file secure.c that result in a Denial of Service (segfault).

CVSS 3.0 · 7.5 High EPSS 3.6% KEV · Not listed
Vendors
Rdesktop
Products
Rdesktop
CVE-2018-20175

rdesktop: Denial of Service in mcs_recv_connect_response and mcs_parse_domain_params

rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Reads in the file mcs.c and result in a Denial of Service (segfault).

CVSS 3.0 · 7.5 High EPSS 4.3% KEV · Not listed
Vendors
Debian Rdesktop
Products
Debian Linux Rdesktop
CVE-2018-20174

rdesktop: Information leak in ui_clip_handle_data

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function ui_clip_handle_data() that results in an information leak.

CVSS 3.0 · 7.5 High EPSS 3.4% KEV · Not listed
Vendors
Rdesktop
Products
Rdesktop