Lucene search

K

CheckpointCVELIST:CVE-2018-8786

HistoryOct 22, 2018 - 12:00 a.m.

CVE-2018-8786

2018-10-2200:00:00

CWE-680

checkpoint

www.cve.org

9.9 High

AI Score

Confidence

High

0.037 Low

EPSS

Percentile

91.7%

FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function update_read_bitmap_update() and results in a memory corruption and probably even a remote code execution.

CNA Affected

[
  {
    "product": "FreeRDP",
    "vendor": "Check Point Software Technologies Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to 2.0.0-rc4"
      }
    ]
  }
]

References

www.securityfocus.com/bid/106938

access.redhat.com/errata/RHSA-2019:0697

github.com/FreeRDP/FreeRDP/commit/445a5a42c500ceb80f8fa7f2c11f3682538033f3

lists.debian.org/debian-lts-announce/2019/02/msg00015.html

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YVJKO2DR5EY4C4QZOP7SNNBEW2JW6FHX/

research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/

usn.ubuntu.com/3845-1/

usn.ubuntu.com/3845-2/

9.9 High

AI Score

Confidence

High

0.037 Low

EPSS

Percentile

91.7%

Related for CVELIST:CVE-2018-8786

cve1 redhatcve1 veracode1 alpinelinux1 ubuntucve1 checkpoint_advisories1 debiancve1 nvd1 osv2 prion1 fedora8 openvas18 nessus19 amazon1 oraclelinux1 redhat1 centos1 debian1 ubuntu2 mageia1 suse2