Heap-based buffer overflow in rdesktop - CVE-2018-8793

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a heap-based buffer overflow condition in the cssp_read_tsrequest() function. A remote attacker can trick the victim who is using a Remote Desktop Protocol (RDP) client on a targeted system into connecting to an attacker-controlled RDP server, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

How to mitigate CVE-2018-8793

Links to Public Exploits and PoC-codes

• Exploit #2703 - CPR-Zero: CVE-2018-8793 (May 18, 2020)

External References

• https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1

Related Security Bulletins

• Multiple vulnerabilities in rdesktop
• OpenSUSE Linux update for rdesktop
• Heap-based buffer overflow in rdesktop (Alpine package)
• Arch Linux update for rdesktop
• Gentoo update for rdesktop
• Fedora 28 update for rdesktop
• Fedora 29 update for rdesktop