Out-of-bounds read in rdesktop - CVE-2018-8792
Published: February 14, 2019 / Updated: May 18, 2020
Vulnerability identifier: #VU17678
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-8792
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability:
Public exploit is available
Vulnerability details
The vulnerability allows a remote attacker to cause DoS condition on the target system.
The vulnerability exists due to an out-of-bounds read condition in the cssp_read_tsrequest() function. A remote attacker can trick the victim who is using a Remote Desktop Protocol (RDP) client on a targeted system into connecting to an attacker-controlled RDP server, trigger segmentation fault (segfault) and cause the service to crash.
Affected software
rdesktop
Gentoo Linux
Arch Linux
SUSE Linux
Opensuse
Fedora
busybox (Alpine package)
rdesktop (Alpine package)
firefox-esr (Alpine package)
rdesktop
Gentoo Linux
Arch Linux
SUSE Linux
Opensuse
Fedora
busybox (Alpine package)
rdesktop (Alpine package)
firefox-esr (Alpine package)
rdesktop
How to mitigate CVE-2018-8792
Update to version 1.8.4.
rdesktop - update to 1.8.4
rdesktop (Alpine package) - update to 1.8.6-r0
rdesktop - addressed in versions 1.8.4-2.fc28, 1.8.4-2.fc29
rdesktop (Alpine package) - update to 1.8.6-r0
rdesktop - addressed in versions 1.8.4-2.fc28, 1.8.4-2.fc29
Links to Public Exploits and PoC-codes
External References
Related Security Bulletins
- Multiple vulnerabilities in rdesktop
- OpenSUSE Linux update for rdesktop
- Out-of-bounds read in rdesktop (Alpine package)
- Out-of-bounds read in busybox (Alpine package)
- Arch Linux update for rdesktop
- Gentoo update for rdesktop
- Out-of-bounds read in firefox-esr (Alpine package)
- Fedora 28 update for rdesktop
- Fedora 29 update for rdesktop