Every CVE Search/ Get API key

CVE-2018-20177

rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap...

9.8 CriticalFix available

CVE-2018-20177 is a critical vulnerability (CVSS 9.8) in Rdesktop, published January 18, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.93%, the 94th percentile. Fixed in rdesktop 1.8.6-r0.

rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in the function rdp_in_unistr() and results in memory corruption and possibly even a remote code execution.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

7.93%Up 5.0 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 9.8

rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in the function rdp_in_unistr() and results in memory corruption and possibly even a remote code execution.

Record
CVE-2018-20177
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-190, CWE-787
Updated
2026-11-02
CVE List No score

rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in the function rdp_in_unistr() and results in memory corruption and possibly even a remote code execution.

Record
CVE-2018-20177
Updated
2026-11-02
EUVDEUVD-2018-12744 No score

rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in the function rdp_in_unistr() and results in memory corruption and possibly even a remote code execution.

Record
EUVD-2018-12744
Updated
2026-11-03
GitHub AdvisoriesGHSA-5cx7-5prr-62vr 9.8

rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap...

rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in the function rdp_in_unistr() and results in memory corruption and possibly even a remote code execution.

Record
GHSA-5cx7-5prr-62vr
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
OSVALPINE-CVE-2018-20177 9.8

rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in the function rdp_in_unistr() and results in memory corruption and possibly even a remote code execution.

Record
ALPINE-CVE-2018-20177
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 9.8

rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in the function rdp_in_unistr() and results in memory corruption and possibly even a remote code execution.

Record
CVE-2018-20177
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 5 moreShow less
OSVDEBIAN-CVE-2018-20177 9.8

rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in the function rdp_in_unistr() and results in memory corruption and possibly even a remote code execution.

Record
DEBIAN-CVE-2018-20177
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2018-20177 9.8

rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in the function rdp_in_unistr() and results in memory corruption and possibly even a remote code execution.

Record
UBUNTU-CVE-2018-20177
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2019-0041 No score

Updated rdesktop package fixes security vulnerabilities

rdesktop has been updated to fix multiple CVE's. Fix memory corruption in process_bitmap_data - CVE-2018-8794 Fix remote code execution in process_bitmap_data - CVE-2018-8795 Fix remote code execution in process_plane - CVE-2018-8797 Fix Denial of Service in mcs_recv_connect_response - CVE-2018-20175 Fix Denial of Service in mcs_parse_domain_params - CVE-2018-20175 Fix Denial of Service in sec_parse_crypt_info - CVE-2018-20176 Fix Denial of Service in sec_recv - CVE-2018-20176 Fix minor information leak in rdpdr_process - CVE-2018-8791 Fix Denial of Service in cssp_read_tsrequest - CVE-2018-8792 Fix remote code execution in cssp_read_tsrequest - CVE-2018-8793 Fix Denial of Service in process_bitmap_data - CVE-2018-8796 Fix minor information leak in rdpsnd_process_ping - CVE-2018-8798 Fix Denial of Service in process_secondary_order - CVE-2018-8799 Fix remote code execution in ui_clip_handle_data - CVE-2018-8800 Fix major information leak in ui_clip_handle_data - CVE-2018-20174 Fix memory corruption in rdp_in_unistr - CVE-2018-20177 Fix Denial of Service in process_demand_active - CVE-2018-20178 Fix remote code execution in lspci_process - CVE-2018-20179 Fix remote code execution in rdpsnddbg_process - CVE-2018-20180 Fix remote code execution in seamless_process - CVE-2018-20181 Fix remote code execution in seamless_process_line - CVE-2018-20182

Record
MGASA-2019-0041
Updated
2026-11-02
OSVopenSUSE-SU-2019:2135-1 No score

Security update for rdesktop

This update for rdesktop fixes the following issues:

rdesktop was updated to 1.8.6:

  • Fix protocol code handling new licenses

rdesktop was updated to 1.8.5:

  • Add bounds checking to protocol handling in order to fix many security problems when communicating with a malicious server.

rdesktop was updated to 1.8.4 (fix for boo#1121448):

  • Add rdp_protocol_error function that is used in several fixes
  • Refactor of process_bitmap_updates
  • Fix possible integer overflow in s_check_rem() on 32bit arch
  • Fix memory corruption in process_bitmap_data - CVE-2018-8794
  • Fix remote code execution in process_bitmap_data - CVE-2018-8795
  • Fix remote code execution in process_plane - CVE-2018-8797
  • Fix Denial of Service in mcs_recv_connect_response - CVE-2018-20175
  • Fix Denial of Service in mcs_parse_domain_params - CVE-2018-20175
  • Fix Denial of Service in sec_parse_crypt_info - CVE-2018-20176
  • Fix Denial of Service in sec_recv - CVE-2018-20176
  • Fix minor information leak in rdpdr_process - CVE-2018-8791
  • Fix Denial of Service in cssp_read_tsrequest - CVE-2018-8792
  • Fix remote code execution in cssp_read_tsrequest - CVE-2018-8793
  • Fix Denial of Service in process_bitmap_data - CVE-2018-8796
  • Fix minor information leak in rdpsnd_process_ping - CVE-2018-8798
  • Fix Denial of Service in process_secondary_order - CVE-2018-8799
  • Fix remote code execution in in ui_clip_handle_data - CVE-2018-8800
  • Fix major information leak in ui_clip_handle_data - CVE-2018-20174
  • Fix memory corruption in rdp_in_unistr - CVE-2018-20177
  • Fix Denial of Service in process_demand_active - CVE-2018-20178
  • Fix remote code execution in lspci_process - CVE-2018-20179
  • Fix remote code execution in rdpsnddbg_process - CVE-2018-20180
  • Fix remote code execution in seamless_process - CVE-2018-20181
  • Fix remote code execution in seamless_process_line - CVE-2018-20182
  • Fix building against OpenSSL 1.1
  • remove obsolete patches
  • rdesktop-Fix-OpenSSL-1.1-compability-issues.patch
  • rdesktop-Fix-crash-in-rdssl_cert_to_rkey.patch
  • update changes file
  • add missing info about bugzilla 1121448
  • Fix protocol code handling new licenses
  • update to 1.8.5
  • Add bounds checking to protocol handling in order to fix many security problems when communicating with a malicious server.

  • Trim redundant wording from description.

  • Use %make_install.

  • update to 1.8.4 (fix for boo#1121448)

  • Add rdp_protocol_error function that is used in several fixes
  • Refactor of process_bitmap_updates
  • Fix possible integer overflow in s_check_rem() on 32bit arch
  • Fix memory corruption in process_bitmap_data - CVE-2018-8794
  • Fix remote code execution in process_bitmap_data - CVE-2018-8795
  • Fix remote code execution in process_plane - CVE-2018-8797
  • Fix Denial of Service in mcs_recv_connect_response - CVE-2018-20175
  • Fix Denial of Service in mcs_parse_domain_params - CVE-2018-20175
  • Fix Denial of Service in sec_parse_crypt_info - CVE-2018-20176
  • Fix Denial of Service in sec_recv - CVE-2018-20176
  • Fix minor information leak in rdpdr_process - CVE-2018-8791
  • Fix Denial of Service in cssp_read_tsrequest - CVE-2018-8792
  • Fix remote code execution in cssp_read_tsrequest - CVE-2018-8793
  • Fix Denial of Service in process_bitmap_data - CVE-2018-8796
  • Fix minor information leak in rdpsnd_process_ping - CVE-2018-8798
  • Fix Denial of Service in process_secondary_order - CVE-2018-8799
  • Fix remote code execution in in ui_clip_handle_data - CVE-2018-8800
  • Fix major information leak in ui_clip_handle_data - CVE-2018-20174
  • Fix memory corruption in rdp_in_unistr - CVE-2018-20177
  • Fix Denial of Service in process_demand_active - CVE-2018-20178
  • Fix remote code execution in lspci_process - CVE-2018-20179
  • Fix remote code execution in rdpsnddbg_process - CVE-2018-20180
  • Fix remote code execution in seamless_process - CVE-2018-20181 *…
Record
openSUSE-SU-2019:2135-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11298-1 No score

rdesktop-1.9.0-4.6 on GA media

These are all security issues fixed in the rdesktop-1.9.0-4.6 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11298-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
rdesktop
Alpine:v3.10
 before 1.8.6-r0
1.8.6-r0
rdesktop
Alpine:v3.11
 before 1.8.6-r0
1.8.6-r0
rdesktop
Alpine:v3.12
 before 1.8.6-r0
1.8.6-r0
rdesktop
Alpine:v3.13
 before 1.8.6-r0
1.8.6-r0
rdesktop
Alpine:v3.14
 before 1.8.6-r0
1.8.6-r0
rdesktop
Debian:12
 before 1.8.4-1
1.8.4-1
rdesktop
Debian:13
 before 1.8.4-1
1.8.4-1
rdesktop
Debian:14
 before 1.8.4-1
1.8.4-1
rdesktop
Debian:8
 before 1.8.4-0+deb8u1, plus listed versions
1.8.2-31.8.2-3+deb8u11.8.3-11.8.3-2
1.8.4-0+deb8u1
rdesktop
Debian:9
 before 1.8.4-1~deb9u1, plus listed versions
1.8.3-2
1.8.4-1~deb9u1
Show 6 moreShow less
Affected packages
PackageAffectedFixed
rdesktop
Mageia:6
 before 1.8.4-1.mga6
1.8.4-1.mga6
rdesktop
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.8.3-1
 None known
rdesktop
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.8.3-21.8.3-2build1
 None known
rdesktop
SUSE:Package Hub 15 SP1
 before 1.8.6-bp151.2.3.1
1.8.6-bp151.2.3.1
rdesktop
openSUSE:Leap 15.1
 before 1.8.6-bp151.2.3.1
1.8.6-bp151.2.3.1
rdesktop
openSUSE:Tumbleweed
 before 1.9.0-4.6
1.9.0-4.6

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 35 moreShow less
This page doesn't list everything

Left out here: the rest of 1 source description. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open