CVE-2018-20181
rdesktop: Remote code execution in seamless_process
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Red Hat (media), Ubuntu (media).
Descripción
rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function seamless_process() and results in memory corruption and probably even a remote code execution.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.10 | rdesktop | 1.8.6-r0 |
| alpine 3.11 | rdesktop | 1.8.6-r0 |
| alpine 3.12 | rdesktop | 1.8.6-r0 |
| alpine 3.13 | rdesktop | 1.8.6-r0 |
| alpine 3.14 | rdesktop | 1.8.6-r0 |
| alpine 3.15 | rdesktop | 1.8.6-r0 |
| alpine 3.16 | rdesktop | 1.8.6-r0 |
| alpine 3.17 | rdesktop | 1.8.6-r0 |
| alpine 3.18 | rdesktop | 1.8.6-r0 |
| alpine 3.19 | rdesktop | 1.8.6-r0 |
| alpine 3.20 | rdesktop | 1.8.6-r0 |
| alpine 3.21 | rdesktop | 1.8.6-r0 |
Mostrar las 25 entradas de 25 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.10 | rdesktop | 1.8.6-r0 |
| alpine 3.11 | rdesktop | 1.8.6-r0 |
| alpine 3.12 | rdesktop | 1.8.6-r0 |
| alpine 3.13 | rdesktop | 1.8.6-r0 |
| alpine 3.14 | rdesktop | 1.8.6-r0 |
| alpine 3.15 | rdesktop | 1.8.6-r0 |
| alpine 3.16 | rdesktop | 1.8.6-r0 |
| alpine 3.17 | rdesktop | 1.8.6-r0 |
| alpine 3.18 | rdesktop | 1.8.6-r0 |
| alpine 3.19 | rdesktop | 1.8.6-r0 |
| alpine 3.20 | rdesktop | 1.8.6-r0 |
| alpine 3.21 | rdesktop | 1.8.6-r0 |
| alpine 3.22 | rdesktop | 1.8.6-r0 |
| alpine 3.23 | rdesktop | 1.8.6-r0 |
| alpine 3.24 | rdesktop | 1.8.6-r0 |
| alpine edge | rdesktop | 1.8.6-r0 |
| debian 11 | rdesktop | 1.8.4-1 |
| debian 12 | rdesktop | 1.8.4-1 |
| debian 13 | rdesktop | 1.8.4-1 |
| debian 14 | rdesktop | 1.8.4-1 |
| debian 8 | rdesktop | 1.8.4-0+deb8u1 |
| debian 9 | rdesktop | 1.8.4-1~deb9u1 |
| echo | rdesktop | 1.8.4-1 |
| Red Hat | rdesktop | sin corrección indicada |
| ubuntu 18.04-ESM | rdesktop | sin corrección indicada |
Referencias
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html
- http://www.securityfocus.com/bid/106938
- https://access.redhat.com/security/cve/CVE-2018-20181
- https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
- https://github.com/rdesktop/rdesktop/commit/766ebcf6f23ccfe8323ac10242ae6e127d4505d2%20%28v1.8.4%29
- https://lists.debian.org/debian-lts-announce/2019/02/msg00030.html
- https://nvd.nist.gov/vuln/detail/CVE-2018-20181
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/