CVE-2018-8792

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that results in a Denial of…

High7.5EPSS 4.1%

Published: 5 Feb 2019
Updated: 17 Sept 2024
Reserved: 19 Mar 2018
Assigned by: checkpoint

Description

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that results in a Denial of Service (segfault).

Scores

CVSS scores of CVE-2018-8792, by who scored it
Scored by	CVSS	Score	Vector
NVDNVD · Modified	3.0	High7.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS (exploitation in 30 days): 4.1% · top 9.3% of all CVEs (3 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

Affected products

Check Point Software Technologies Ltd. · rdesktop
- affected All versions up to and including v1.8.3

References (7)

106938 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1 (opens in a new tab)x_refsource_MISCx_transferred
GLSA-201903-06 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ (opens in a new tab)x_refsource_CONFIRMx_transferred
DSA-4394 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
[debian-lts-announce] 20190219 [SECURITY] [DLA 1683-1] rdesktop security update (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
openSUSE-SU-2019:2135 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2018-8792](https://trackcve.app/badge/CVE-2018-8792.svg)](https://trackcve.app/cve/CVE-2018-8792)

Record last updated 17 Sept 2024, 02:17 UTC.