rdesktop: Multiple vulnerabilities

Background rdesktop is a Remote Desktop Protocol RDP Client. Description Multiple vulnerabilities have been discovered in rdesktop. Please review the CVE identifiers referenced below for details. Impact A remote attacker could cause a Denial of Service condition, obtain sensitive information, or...

The vulnerability of the “ui_clip_handle_data” function implementation in the RDP client rdesktop, related to buffer overflow, allows an attacker to execute arbitrary code.

The vulnerability of the “uicliphandledata” function implementation in the RDP client rdesktop is related to buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

[SECURITY] [DSA 4394-1] rdesktop security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4394-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 18, 2019 https://www.debian.org/security/faq -...

PT-2019-1460

Name of the Vulnerable Software and Affected Versions rdesktop versions up to and including v1.8.3 Description The issue is related to a heap-based buffer overflow in the cssp read tsrequest function of the RDP client. This can lead to memory corruption and potentially allow a remote attacker to...

PT-2019-1461

Name of the Vulnerable Software and Affected Versions rdesktop versions up to and including v1.8.3 Description The issue is related to an Integer Overflow in the process bitmap updates function, leading to an Out-Of-Bounds Write and resulting in memory corruption. This could potentially allow for...

PT-2019-1466

Name of the Vulnerable Software and Affected Versions rdesktop versions up to and including v1.8.3 Description The issue is related to an Out-Of-Bounds Read in the process secondary order function, which can result in a Denial of Service segfault. This can be exploited by a remote attacker to cau...

PT-2019-1915

Name of the Vulnerable Software and Affected Versions rdesktop versions up to and including v1.8.3 Description The issue is related to an Out-Of-Bounds Read in the process demand active function, which results in a Denial of Service segfault. This can be exploited by a remote attacker to cause a...

PT-2018-2353

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to the RDP client mstsc.exe in the Windows operating system, specifically with security mechanism shortcomings when using the shared clipboard during remote connections...

FreeRDP Rdp Client Read Server Proprietary Certificate Denial of Service Vulnerability

Summary An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the...

[SECURITY] Fedora 24 Update: xrdp-0.9.1-5.fc24

xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...

PT-2016-5793

Name of the Vulnerable Software and Affected Versions Pulse Connect Secure versions 8.1R7 through 8.2R1 Description The issue allows remote authenticated users to bypass intended access restrictions in the Terminal Services Remote Desktop Protocol RDP client session restrictions feature...

CVE-2016-3985: Improper Access Control

The Terminal Services Remote Desktop Protocol RDP client session restrictions feature in Pulse Connect Secure aka PCS 8.1R7 and 8.2R1 allow remote authenticated users to bypass intended access restrictions via unspecified vectors...

CVE-2015-2473

Untrusted search path vulnerability in the client in Remote Desktop Protocol RDP through 8.1 in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp...

RDP TLS downgrade

For those using TLS with Microsoft's Terminal server. With Terminal server installed on Windows 2003 Server with current service packs and patches it is possible to bypass the server side setting that requires SSL with a self-signed cert. You will automatically be downgraded to not using TLS and...