621 matches found
CVE-2018-8793
CVE-2018-8793 affects rdesktop up to version 1.8.3, where a heap-based buffer overflow in cssp_read_tsrequest() causes memory corruption and likely remote code execution. Multiple connected advisories confirm upstream fix to 1.8.4; remediation is to upgrade to 1.8.4 or newer. Exploitation status ...
CVE-2018-8794
CVE-2018-8794 affects rdesktop up to version 1.8.3. The vulnerability is an integer overflow causing an out-of-bounds write in process_bitmap_updates(), leading to memory corruption and potential remote code execution when connecting to a malicious server. Multiple connected advisories confirm re...
CVE-2018-8791
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdrprocess that results in an information leak...
CVE-2018-8797
rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function processplane that results in a memory corruption and probably even a remote code execution...
CVE-2018-8799
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function processsecondaryorder that results in a Denial of Service segfault...
CVE-2018-8799
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function processsecondaryorder that results in a Denial of Service segfault...
CVE-2018-8793
rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function csspreadtsrequest that results in a memory corruption and probably even a remote code execution...
CVE-2018-8793
rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function csspreadtsrequest that results in a memory corruption and probably even a remote code execution...
CVE-2018-8798
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsndprocessping that results in an information leak...
CVE-2018-8794
rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to an Out-Of-Bounds Write in function processbitmapupdates and results in a memory corruption and possibly even a remote code execution...
CVE-2018-8792
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function csspreadtsrequest that results in a Denial of Service segfault...
CVE-2018-8796
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function processbitmapupdates that results in a Denial of Service segfault...
CVE-2018-8799
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function processsecondaryorder that results in a Denial of Service segfault...
CVE-2018-8792
CVE-2018-8792 affects rdesktop up to version 1.8.3. The flaw is an out-of-bounds read in cssp_read_tsrequest(), leading to a Denial of Service (segfault). Public advisories indicate upgrading to 1.8.4 or later as the fix. Exploitation details are not described in the provided documents; no in-the...
CVE-2018-8797
CVE-2018-8797 : In rdesktop, a heap-based buffer overflow in function process_plane() (vulnerable in versions up to 1.8.3) can cause memory corruption and probably remote code execution. Public-fix track shows upstream fix in 1.8.4; several distributions (e.g., Debian, Arch Linux, Fedora) release...
CVE-2018-8792
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function csspreadtsrequest that results in a Denial of Service segfault...
CVE-2018-8795
rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in function processbitmapupdates and results in a memory corruption and probably even a remote code execution...
CVE-2018-8798
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsndprocessping that results in an information leak...
CVE-2018-8800
rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function uicliphandledata that results in a memory corruption and probably even a remote code execution...
CVE-2018-8799
CVE-2018-8799 affects the rdesktop client; multiple sources indicate that versions up to 1.8.3 contain an out-of-bounds read in function process_secondary_order(), leading to a denial of service (segfault). Several connected advisories note that the issue is addressed in the 1.8.4 release series ...