rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in the function rdp_in_unistr() and results in memory corruption and possibly even a remote code execution.
| CVE | CVE-2018-20177 |
|---|---|
| Severidad | CRITICAL |
| CVSS | 9.8 / 10 |
| EPSS | 7.9% en 30 días (percentil 95) |
| CWE | CWE-190, CWE-787 |
| Exposición (Shodan) | sin hosts expuestos detectados actualmente |
Productos afectados (catálogo NVD)
debian/debian_linuxopensuse/backportsopensuse/leaprdesktop/rdesktop