CVE-2018-8798

HIGH

rdesktop <1.8.3 - Info Disclosure

Title source: llm

Description

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsnd_process_ping() that results in an information leak.

References (7)

Scores

CVSS v3 7.5
EPSS 0.0054
EPSS Percentile 67.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-125 CWE-126
Status published

Affected Products (3)

rdesktop/rdesktop < 1.8.3
debian/debian_linux
debian/debian_linux

Timeline

Published Feb 05, 2019
Tracked Since Feb 18, 2026