PT-2019-1465

CVE-2018-8798

Publicado

2019-01-18

Atualizado

2026-10-31

Descrição por

CVSS 3.1

7.5

Alta

MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions rdesktop versions up to and including v1.8.3

Description The issue is related to an Out-Of-Bounds Read in the rdpsnd process ping() function, which results in an information leak. Exploitation of this issue may allow a remote attacker to cause a denial of service.

Recommendations For versions up to and including v1.8.3, consider disabling the rdpsnd process ping() function as a temporary workaround until a patch is available.

Explorabilidade

Correção

Impactos

Pesquisadores

Eyal Itkin

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-125: Out-of-bounds Read

CWE-126: Buffer Over-read

Identificadores relacionados

CVE-2018-8798