CVE-2018-8795

rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in function processbitmapupdates and results in a memory corruption and probably even a remote code execution...

CVE-2018-8798

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsndprocessping that results in an information leak...

CVE-2018-8796

CVE-2018-8796 affects rdesktop up to v1.8.3, with an out-of-bounds read in process_bitmap_updates() causing a denial of service (segfault). Remediation: upgrade to v1.8.4 or later (multiple advisories note the fix in upstream 1.8.4; Fedora/Debian/Arch Linux references).

CVE-2018-8794

rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to an Out-Of-Bounds Write in function processbitmapupdates and results in a memory corruption and possibly even a remote code execution...

CVE-2018-8800

rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function uicliphandledata that results in a memory corruption and probably even a remote code execution...

CVE-2018-8791

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdrprocess that results in an information leak...

CVE-2018-8800

rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function uicliphandledata that results in a memory corruption and probably even a remote code execution...

CVE-2018-8798

CVE-2018-8798 affects the rdesktop RDP client up to version 1.8.3, where rdpsnd_process_ping() contains an out-of-bounds read that leads to information leakage. Public sources in the connected documents confirm the vulnerability class as an information disclosure issue in rdesktop prior to 1.8.4....

CVE-2018-8794

rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to an Out-Of-Bounds Write in function processbitmapupdates and results in a memory corruption and possibly even a remote code execution...

CVE-2018-8791

CVE-2018-8791 affects the rdesktop RDP client (versions up to and including 1.8.3). The vulnerability is an out-of-bounds read in the function rdpdr_process(), leading to information leakage when connecting to a malicious server. Several advisory sources confirm the issue and note that upstream f...

CVE-2018-8793

rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function csspreadtsrequest that results in a memory corruption and probably even a remote code execution...

CVE-2018-8796

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function processbitmapupdates that results in a Denial of Service segfault...

CVE-2018-8791

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdrprocess that results in an information leak...

CVE-2018-8797

rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function processplane that results in a memory corruption and probably even a remote code execution...

CVE-2018-8795

rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in function processbitmapupdates and results in a memory corruption and probably even a remote code execution...

CVE-2018-8796

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function processbitmapupdates that results in a Denial of Service segfault...

CVE-2018-8792

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function csspreadtsrequest that results in a Denial of Service segfault...

CVE-2018-8798

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsndprocessping that results in an information leak...

CVE-2018-8795

CVE-2018-8795 affects rdesktop up to and including v1.8.3. The vulnerability is an Integer Overflow that leads to a Heap-Based Buffer Overflow in process_bitmap_updates(), causing memory corruption and likely remote code execution when connecting to a malicious RDP server. Affected software: rdes...

CVE-2018-8800

CVE-2018-8800 affects rdesktop prior to 1.8.4. It is a heap-based buffer overflow in ui_clip_handle_data() causing memory corruption and likely remote code execution when connecting to a malicious server. Multiple advisories (Arch Linux ASA-201902-5, Debian DSA-4394-1/ DLA-1683-1) indicate upgrad...