ALT-PU-2019-2898-1
Closed vulnerabilities
BDU:2019-00848
Уязвимость реализации функции «cssp_read_tsrequest» RDP-клиента rdesktop, связанная с чтением за пределами границы памяти, позволяющая нарушителю вызывать отказ в обслуживании
BDU:2019-00849
Уязвимость реализации функции «rdpdr_process» RDP-клиента rdesktop, связанная с чтением за пределами границы памяти, позволяющая нарушителю вызывать отказ в обслуживании
BDU:2019-00850
Уязвимость реализации функции «cssp_read_tsrequest» RDP-клиента rdesktop, связанная с переполнением буфера в памяти, позволяющая нарушителю выполнить произвольный код
BDU:2019-00851
Уязвимость реализации функции «process_bitmap_updates» RDP-клиента rdesktop, связанная с целочисленным переполнением, которое приводит к записи за пределы функции, позволяющая нарушителю выполнить произвольный код
BDU:2019-00852
Уязвимость реализации функции process_bitmap_updates() RDP-клиента rdesktop, связанная с целочисленным переполнением, которое приводит к переполнению кучи, позволяющая нарушителю выполнить произвольный код
BDU:2019-00853
Уязвимость реализации функции process_bitmap_updates() RDP-клиента rdesktop, связанная с чтением за пределами границы памяти, позволяющая нарушителю вызывать отказ в обслуживании
BDU:2019-00854
Уязвимость реализации функции «process_plane» RDP-клиента rdesktop, связанная с переполнением буфера, позволяющая нарушителю выполнить произвольный код
BDU:2019-00855
Уязвимость реализации функции «rdpsnd_process_ping» RDP-клиента rdesktop, связанная с чтением за пределами границы памяти, позволяющая нарушителю вызывать отказ в обслуживании
BDU:2019-00856
Уязвимость реализации функции «process_secondary_order» RDP-клиента rdesktop, связанная с чтением за пределами границы памяти, позволяющая нарушителю вызывать отказ в обслуживании
BDU:2019-00857
Уязвимость реализации функции «ui_clip_handle_data» RDP-клиента rdesktop, связанная с переполнением буфера, позволяющая нарушителю выполнить произвольный код
BDU:2019-01579
Уязвимость функции ui_clip_handle_data RDP-клиента rdesktop, связанная с чтением за пределами границы буфера, позволяющая нарушителю получить доступ к конфиденциальным данным
BDU:2019-01580
Уязвимость файла RDP-клиента rdesktop, связанная с чтением за пределами границы буфера, позволяющая нарушителю вызывать отказ в обслуживании
BDU:2019-01581
Уязвимость RDP-клиента rdesktop, связанная с чтением за пределами границы буфера, позволяющая нарушителю вызывать отказ в обслуживании
BDU:2019-01582
Уязвимость функции rdp_in_unistr RDP-клиента rdesktop, связанная с целочисленным переполнением, приводящим к переполнению буфера на основе кучи, позволяющая нарушителю выполнить произвольный код
BDU:2019-01583
Уязвимость функции process_demand_active RDP-клиента rdesktop, связанная с чтением за пределами границы буфера, позволяющая нарушителю вызывать отказ в обслуживании
BDU:2019-01584
Уязвимость функции lspci_process RDP-клиента rdesktop, связанная с целочисленным переполнением, приводящим к переполнению буфера на основе кучи, позволяющая нарушителю выполнить произвольный код
BDU:2019-01585
Уязвимость функции rdpsnddbg_process RDP-клиента rdesktop, связанная с целочисленным переполнением, приводящим к переполнению буфера на основе кучи, позволяющая нарушителю выполнить произвольный код
BDU:2019-01586
Уязвимость функции seamless_process RDP-клиента rdesktop, связанная с целочисленным переполнением, приводящим к переполнению буфера на основе кучи, позволяющая нарушителю выполнить произвольный код
BDU:2019-01587
Уязвимость функции seamless_process_line RDP-клиента rdesktop, связанная с переполнение буфера, позволяющая нарушителю выполнить произвольный код
Modified: 2024-11-21
CVE-2018-20174
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function ui_clip_handle_data() that results in an information leak.
- openSUSE-SU-2019:2135
- openSUSE-SU-2019:2135
- 106938
- 106938
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- GLSA-201903-06
- GLSA-201903-06
- DSA-4394
- DSA-4394
Modified: 2024-11-21
CVE-2018-20175
rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Reads in the file mcs.c and result in a Denial of Service (segfault).
- openSUSE-SU-2019:2135
- openSUSE-SU-2019:2135
- 106938
- 106938
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- GLSA-201903-06
- GLSA-201903-06
- DSA-4394
- DSA-4394
Modified: 2024-11-21
CVE-2018-20176
rdesktop versions up to and including v1.8.3 contain several Out-Of- Bounds Reads in the file secure.c that result in a Denial of Service (segfault).
- openSUSE-SU-2019:2135
- openSUSE-SU-2019:2135
- 106938
- 106938
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- GLSA-201903-06
- GLSA-201903-06
- DSA-4394
- DSA-4394
Modified: 2024-11-21
CVE-2018-20177
rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in the function rdp_in_unistr() and results in memory corruption and possibly even a remote code execution.
- openSUSE-SU-2019:2135
- openSUSE-SU-2019:2135
- 106938
- 106938
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- GLSA-201903-06
- GLSA-201903-06
- DSA-4394
- DSA-4394
Modified: 2024-11-21
CVE-2018-20178
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function process_demand_active() that results in a Denial of Service (segfault).
- openSUSE-SU-2019:2135
- openSUSE-SU-2019:2135
- 106938
- 106938
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- GLSA-201903-06
- GLSA-201903-06
- DSA-4394
- DSA-4394
Modified: 2024-11-21
CVE-2018-20179
rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function lspci_process() and results in memory corruption and probably even a remote code execution.
- openSUSE-SU-2019:2135
- openSUSE-SU-2019:2135
- 106938
- 106938
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- GLSA-201903-06
- GLSA-201903-06
- DSA-4394
- DSA-4394
Modified: 2024-11-21
CVE-2018-20180
rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function rdpsnddbg_process() and results in memory corruption and probably even a remote code execution.
- openSUSE-SU-2019:2135
- openSUSE-SU-2019:2135
- 106938
- 106938
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- GLSA-201903-06
- GLSA-201903-06
- DSA-4394
- DSA-4394
Modified: 2024-11-21
CVE-2018-20181
rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function seamless_process() and results in memory corruption and probably even a remote code execution.
- openSUSE-SU-2019:2135
- openSUSE-SU-2019:2135
- 106938
- 106938
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- GLSA-201903-06
- GLSA-201903-06
- DSA-4394
- DSA-4394
Modified: 2024-11-21
CVE-2018-20182
rdesktop versions up to and including v1.8.3 contain a Buffer Overflow over the global variables in the function seamless_process_line() that results in memory corruption and probably even a remote code execution.
- openSUSE-SU-2019:2135
- openSUSE-SU-2019:2135
- 106938
- 106938
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- GLSA-201903-06
- GLSA-201903-06
- DSA-4394
- DSA-4394
Modified: 2024-11-21
CVE-2018-8791
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdr_process() that results in an information leak.
- openSUSE-SU-2019:2135
- openSUSE-SU-2019:2135
- 106938
- 106938
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- GLSA-201903-06
- GLSA-201903-06
- DSA-4394
- DSA-4394
Modified: 2024-11-21
CVE-2018-8792
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that results in a Denial of Service (segfault).
- openSUSE-SU-2019:2135
- openSUSE-SU-2019:2135
- 106938
- 106938
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- GLSA-201903-06
- GLSA-201903-06
- DSA-4394
- DSA-4394
Modified: 2024-11-21
CVE-2018-8793
rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function cssp_read_tsrequest() that results in a memory corruption and probably even a remote code execution.
- openSUSE-SU-2019:2135
- openSUSE-SU-2019:2135
- 106938
- 106938
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- GLSA-201903-06
- GLSA-201903-06
- DSA-4394
- DSA-4394
Modified: 2024-11-21
CVE-2018-8794
rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to an Out-Of-Bounds Write in function process_bitmap_updates() and results in a memory corruption and possibly even a remote code execution.
- openSUSE-SU-2019:2135
- openSUSE-SU-2019:2135
- 106938
- 106938
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- GLSA-201903-06
- GLSA-201903-06
- DSA-4394
- DSA-4394
Modified: 2024-11-21
CVE-2018-8795
rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in function process_bitmap_updates() and results in a memory corruption and probably even a remote code execution.
- openSUSE-SU-2019:2135
- openSUSE-SU-2019:2135
- 106938
- 106938
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- GLSA-201903-06
- GLSA-201903-06
- DSA-4394
- DSA-4394
Modified: 2024-11-21
CVE-2018-8796
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_bitmap_updates() that results in a Denial of Service (segfault).
- openSUSE-SU-2019:2135
- openSUSE-SU-2019:2135
- 106938
- 106938
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- GLSA-201903-06
- GLSA-201903-06
- DSA-4394
- DSA-4394
Modified: 2024-11-21
CVE-2018-8797
rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function process_plane() that results in a memory corruption and probably even a remote code execution.
- openSUSE-SU-2019:2135
- openSUSE-SU-2019:2135
- 106938
- 106938
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- GLSA-201903-06
- GLSA-201903-06
- DSA-4394
- DSA-4394
Modified: 2024-11-21
CVE-2018-8798
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsnd_process_ping() that results in an information leak.
- openSUSE-SU-2019:2135
- openSUSE-SU-2019:2135
- 106938
- 106938
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- GLSA-201903-06
- GLSA-201903-06
- DSA-4394
- DSA-4394
Modified: 2024-11-21
CVE-2018-8799
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_secondary_order() that results in a Denial of Service (segfault).
- openSUSE-SU-2019:2135
- openSUSE-SU-2019:2135
- 106938
- 106938
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- GLSA-201903-06
- GLSA-201903-06
- DSA-4394
- DSA-4394
Modified: 2024-11-21
CVE-2018-8800
rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function ui_clip_handle_data() that results in a memory corruption and probably even a remote code execution.
- openSUSE-SU-2019:2135
- openSUSE-SU-2019:2135
- 106938
- 106938
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- [debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- GLSA-201903-06
- GLSA-201903-06
- DSA-4394
- DSA-4394
Closed bugs
[CVE] надо собрать 1.8.4