CVE-2018-8791

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdrprocess that results in an information leak...

Flaws in Popular RDP Clients Allow Malicious Servers to Reverse Hack PCs

You've always been warned not to share remote access to your computer with any untrusted people for many reasons—it's basic cyber security advice, and common sense, right? But what if I say, you should not even trust anyone who invites or offers you full remote access to their computers? Security...

CVE-2018-8792

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function csspreadtsrequest that results in a Denial of Service segfault...

CVE-2018-8792

CVE-2018-8792 affects rdesktop up to version 1.8.3. The flaw is an out-of-bounds read in cssp_read_tsrequest(), leading to a Denial of Service (segfault). Public advisories indicate upgrading to 1.8.4 or later as the fix. Exploitation details are not described in the provided documents; no in-the...

CVE-2018-8791

CVE-2018-8791 affects the rdesktop RDP client (versions up to and including 1.8.3). The vulnerability is an out-of-bounds read in the function rdpdr_process(), leading to information leakage when connecting to a malicious server. Several advisory sources confirm the issue and note that upstream f...

CVE-2018-8793

rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function csspreadtsrequest that results in a memory corruption and probably even a remote code execution...

CVE-2018-8795

rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in function processbitmapupdates and results in a memory corruption and probably even a remote code execution...

CVE-2018-8796

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function processbitmapupdates that results in a Denial of Service segfault...

CVE-2018-8797

rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function processplane that results in a memory corruption and probably even a remote code execution...

CVE-2018-8795

CVE-2018-8795 affects rdesktop up to and including v1.8.3. The vulnerability is an Integer Overflow that leads to a Heap-Based Buffer Overflow in process_bitmap_updates(), causing memory corruption and likely remote code execution when connecting to a malicious RDP server. Affected software: rdes...

CVE-2018-8800

CVE-2018-8800 affects rdesktop prior to 1.8.4. It is a heap-based buffer overflow in ui_clip_handle_data() causing memory corruption and likely remote code execution when connecting to a malicious server. Multiple advisories (Arch Linux ASA-201902-5, Debian DSA-4394-1/ DLA-1683-1) indicate upgrad...

CVE-2018-8798

CVE-2018-8798 affects the rdesktop RDP client up to version 1.8.3, where rdpsnd_process_ping() contains an out-of-bounds read that leads to information leakage. Public sources in the connected documents confirm the vulnerability class as an information disclosure issue in rdesktop prior to 1.8.4....

CVE-2018-8797

CVE-2018-8797 : In rdesktop, a heap-based buffer overflow in function process_plane() (vulnerable in versions up to 1.8.3) can cause memory corruption and probably remote code execution. Public-fix track shows upstream fix in 1.8.4; several distributions (e.g., Debian, Arch Linux, Fedora) release...

CVE-2018-8799

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function processsecondaryorder that results in a Denial of Service segfault...

CVE-2018-8791

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdrprocess that results in an information leak...

CVE-2018-8799

CVE-2018-8799 affects the rdesktop client; multiple sources indicate that versions up to 1.8.3 contain an out-of-bounds read in function process_secondary_order(), leading to a denial of service (segfault). Several connected advisories note that the issue is addressed in the 1.8.4 release series ...

CVE-2018-8798

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsndprocessping that results in an information leak...

CVE-2018-8794

CVE-2018-8794 affects rdesktop up to version 1.8.3. The vulnerability is an integer overflow causing an out-of-bounds write in process_bitmap_updates(), leading to memory corruption and potential remote code execution when connecting to a malicious server. Multiple connected advisories confirm re...

CVE-2018-8793

CVE-2018-8793 affects rdesktop up to version 1.8.3, where a heap-based buffer overflow in cssp_read_tsrequest() causes memory corruption and likely remote code execution. Multiple connected advisories confirm upstream fix to 1.8.4; remediation is to upgrade to 1.8.4 or newer. Exploitation status ...

CVE-2018-8794

rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to an Out-Of-Bounds Write in function processbitmapupdates and results in a memory corruption and possibly even a remote code execution...