Description
rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to an Out-Of-Bounds Write in function process_bitmap_updates() and results in a memory corruption and possibly even a remote code execution.
Scores
CVSS v3
9.8
EPSS
0.0596
EPSS Percentile
90.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-190
CWE-787
CWE-680
Status
published
Products (4)
debian/debian_linux
8.0
debian/debian_linux
9.0
opensuse/leap
15.1
rdesktop/rdesktop
< 1.8.3
Published
Feb 05, 2019
Tracked Since
Feb 18, 2026