CVE-2018-20179

rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function lspciprocess and results in memory corruption and probably even a remote code execution...

The vulnerability of the “rdpsnd_process_ping” function implementation in the RDP client rdesktop, related to reading beyond the memory boundary, allows a attacker to cause a service failure.

The vulnerability of the “rdpsndprocessping” function in the RDP client rdesktop implementation is related to reading data beyond the memory boundary. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability in the implementation of the “cssp_read_tsrequest” function in the RDP client rdesktop software arises from buffer overflow in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the “csspreadtsrequest” function in the RDP client rdesktop implementation is related to buffer overflow in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

rdesktop process_bitmap_updates() function out-of-bounds read vulnerability

rdesktop is an open source UNIX client for connecting to Windows Remote Desktop Services. An out-of-bounds read vulnerability exists in the processbitmapupdates function in rdesktop 1.8.3 and earlier. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2018-8798

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsndprocessping that results in an information leak...

ALPINE-CVE-2018-8793

rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function csspreadtsrequest that results in a memory corruption and probably even a remote code execution...

CVE-2018-8798

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsndprocessping that results in an information leak...

DEBIAN-CVE-2018-8791

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdrprocess that results in an information leak...

UBUNTU-CVE-2018-8796

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function processbitmapupdates that results in a Denial of Service segfault...

CVE-2018-8798

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsndprocessping that results in an information leak...

CVE-2018-20174

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function uicliphandledata that results in an information leak...

The vulnerability of the Gentoo Linux operating system allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the rdesktop package up to version 1.7.0 of the Gentoo Linux operating system, whose use may lead to violations of confidentiality, integrity, and accessibility of protected information...

Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the rdesktop package up to version 1.6.0 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

GLSA-201210-03 : rdesktop: Directory Traversal

The remote host is affected by the vulnerability described in GLSA-201210-03 rdesktop: Directory Traversal A vulnerability has been discovered in rdesktop. Please review the CVE identifier referenced below for details. Impact : Remote RDP servers may be able to read or overwrite arbitrary files v...

DEBIAN-CVE-2011-1595

Directory traversal vulnerability in the diskcreate function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. dot dot in a pathname...

CVE-2008-1803

Integer signedness error in the xrealloc function rdesktop.c in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow. NOTE: the role of the channelprocess function was not specified by the original researcher...

DEBIAN-CVE-2008-1801

Integer underflow in the isorecvmsg function iso.c in rdesktop 1.5.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Remote Desktop Protocol RDP request with a small length field...

rdesktop 1.5.0 - 'process_redirect_pdu()' BSS Overflow (PoC)

!/usr/bin/perl http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=697 use strict; use IO::Socket; my $sock = IO::Socket::INET-newLocalAddr = '0.0.0.0', LocalPort = '3389', Listen = 1, Reuse = 1 || die$!; my $evil = "\x03\x00\x01\x47\x02\xf0\x80\x68\x00\x01\x03\xeb\x70\x81\x38"...

rdesktop 1.5.0 iso_recv_msg() Integer Underflow Vulnerability PoC

Exploit for linux platform in category dos / poc ================================================================= rdesktop 1.5.0 isorecvmsg Integer Underflow Vulnerability PoC ================================================================= !/usr/bin/perl...

CVE-2004-2655

rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen...