ID:3743 - Exploit for Integer underflow in Debian Linux - CVE-2018-20180

 
Main Vulnerability Database Exploits ID:3743 - Exploit for Integer underflow in Debian Linux - CVE-2018-20180

ID:3743 - Exploit for Integer underflow in Debian Linux - CVE-2018-20180

Published: August 4, 2020


Vulnerability identifier: #VU33453
Vulnerability risk: High
CVE-ID: CVE-2018-20180
CWE-ID: CWE-191
Exploitation vector: Remote access
Vulnerable software:
Debian Linux

Link to public exploit:


Vulnerability description

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function rdpsnddbg_process() and results in memory corruption and probably even a remote code execution.


Remediation

Install update from vendor's website.