PT-2019-1459
CVE-2018-8791
·
Published
2019-01-18
·
Updated
2026-10-31
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
rdesktop versions up to and including v1.8.3
Description
The issue is related to an Out-Of-Bounds Read in the
rdpdr process() function, which results in an information leak. Exploitation of this issue may allow a remote attacker to cause a denial of service.Recommendations
For versions up to and including v1.8.3, consider disabling the
rdpdr process() function as a temporary workaround until a patch is available. Restrict access to the RDP client to minimize the risk of exploitation. Found an issue in the description? Have something to add? Feel free to write us 👾