CVE-2018-8796

Name of the Vulnerable Software and Affected Versions rdesktop versions up to and including v1.8.3

Description The issue is related to an Out-Of-Bounds Read in the process bitmap updates() function, which can result in a Denial of Service (segfault). This can be exploited by a remote attacker to cause a disruption in service. The vulnerability is associated with a memory boundary read error in the implementation of the process bitmap updates() function in the rdesktop RDP client.

Recommendations For rdesktop versions up to and including v1.8.3, consider applying a patch or update when available to fix the process bitmap updates() function issue. As a temporary workaround, consider restricting access to the process bitmap updates() function until a patch is available.