Heap-based buffer overflow in rdesktop - CVE-2018-8795
Published: February 11, 2019 / Updated: May 18, 2020
Vulnerability identifier: #VU17473
CSH Severity: High
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-8795
CWE-ID: CWE-122
Exploitation vector: Remote access
Exploit availability:
Public exploit is available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to an integer overflow. A remote attacker can trick the victim who is using a Remote Desktop Protocol (RDP) client on a targeted system into connecting to an attacker-controlled RDP server, trigger out-of-bounds write condition in the process_bitmap_updates() function and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
rdesktop
Gentoo Linux
Arch Linux
SUSE Linux
Opensuse
Fedora
busybox (Alpine package)
rdesktop (Alpine package)
firefox-esr (Alpine package)
rdesktop
Gentoo Linux
Arch Linux
SUSE Linux
Opensuse
Fedora
busybox (Alpine package)
rdesktop (Alpine package)
firefox-esr (Alpine package)
rdesktop
How to mitigate CVE-2018-8795
Update to version 1.8.4.
rdesktop - update to 1.8.4
rdesktop (Alpine package) - update to 1.8.6-r0
rdesktop - addressed in versions 1.8.4-2.fc28, 1.8.4-2.fc29
rdesktop (Alpine package) - update to 1.8.6-r0
rdesktop - addressed in versions 1.8.4-2.fc28, 1.8.4-2.fc29
Links to Public Exploits and PoC-codes
External References
Related Security Bulletins
- Multiple vulnerabilities in rdesktop
- OpenSUSE Linux update for rdesktop
- Heap-based buffer overflow in rdesktop (Alpine package)
- Heap-based buffer overflow in busybox (Alpine package)
- Arch Linux update for rdesktop
- Gentoo update for rdesktop
- Heap-based buffer overflow in firefox-esr (Alpine package)
- Fedora 28 update for rdesktop
- Fedora 29 update for rdesktop