CVE-2018-8792
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function...
CVE-2018-8792 is a high vulnerability (CVSS 7.5) in Check Point Software Technologies Ltd. Rdesktop, published January 18, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.07%, the 90th percentile. Fixed in rdesktop 1.8.6-r0.
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that results in a Denial of Service (segfault).
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that results in a Denial of Service (segfault).
- Record
CVE-2018-8792- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-126, CWE-125
- Updated
- 2026-11-02
CVE List No score
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that results in a Denial of Service (segfault).
- Record
CVE-2018-8792- Weakness
- CWE-126
- Updated
- 2026-11-02
EUVDEUVD-2018-20401 No score
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that results in a Denial of Service (segfault).
- Record
EUVD-2018-20401- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vpp6-5wpp-9pxq
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function...
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that results in a Denial of Service (segfault).
- Record
GHSA-vpp6-5wpp-9pxq- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVALPINE-CVE-2018-8792
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that results in a Denial of Service (segfault).
- Record
ALPINE-CVE-2018-8792- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSV
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that results in a Denial of Service (segfault).
- Record
CVE-2018-8792- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 5 moreShow less
OSVDEBIAN-CVE-2018-8792
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that results in a Denial of Service (segfault).
- Record
DEBIAN-CVE-2018-8792- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-8792
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that results in a Denial of Service (segfault).
- Record
UBUNTU-CVE-2018-8792- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2019-0041 No score
Updated rdesktop package fixes security vulnerabilities
rdesktop has been updated to fix multiple CVE's. Fix memory corruption in process_bitmap_data - CVE-2018-8794 Fix remote code execution in process_bitmap_data - CVE-2018-8795 Fix remote code execution in process_plane - CVE-2018-8797 Fix Denial of Service in mcs_recv_connect_response - CVE-2018-20175 Fix Denial of Service in mcs_parse_domain_params - CVE-2018-20175 Fix Denial of Service in sec_parse_crypt_info - CVE-2018-20176 Fix Denial of Service in sec_recv - CVE-2018-20176 Fix minor information leak in rdpdr_process - CVE-2018-8791 Fix Denial of Service in cssp_read_tsrequest - CVE-2018-8792 Fix remote code execution in cssp_read_tsrequest - CVE-2018-8793 Fix Denial of Service in process_bitmap_data - CVE-2018-8796 Fix minor information leak in rdpsnd_process_ping - CVE-2018-8798 Fix Denial of Service in process_secondary_order - CVE-2018-8799 Fix remote code execution in ui_clip_handle_data - CVE-2018-8800 Fix major information leak in ui_clip_handle_data - CVE-2018-20174 Fix memory corruption in rdp_in_unistr - CVE-2018-20177 Fix Denial of Service in process_demand_active - CVE-2018-20178 Fix remote code execution in lspci_process - CVE-2018-20179 Fix remote code execution in rdpsnddbg_process - CVE-2018-20180 Fix remote code execution in seamless_process - CVE-2018-20181 Fix remote code execution in seamless_process_line - CVE-2018-20182
- Record
MGASA-2019-0041- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2135-1 No score
Security update for rdesktop
This update for rdesktop fixes the following issues:
rdesktop was updated to 1.8.6:
- Fix protocol code handling new licenses
rdesktop was updated to 1.8.5:
- Add bounds checking to protocol handling in order to fix many security problems when communicating with a malicious server.
rdesktop was updated to 1.8.4 (fix for boo#1121448):
- Add rdp_protocol_error function that is used in several fixes
- Refactor of process_bitmap_updates
- Fix possible integer overflow in s_check_rem() on 32bit arch
- Fix memory corruption in process_bitmap_data - CVE-2018-8794
- Fix remote code execution in process_bitmap_data - CVE-2018-8795
- Fix remote code execution in process_plane - CVE-2018-8797
- Fix Denial of Service in mcs_recv_connect_response - CVE-2018-20175
- Fix Denial of Service in mcs_parse_domain_params - CVE-2018-20175
- Fix Denial of Service in sec_parse_crypt_info - CVE-2018-20176
- Fix Denial of Service in sec_recv - CVE-2018-20176
- Fix minor information leak in rdpdr_process - CVE-2018-8791
- Fix Denial of Service in cssp_read_tsrequest - CVE-2018-8792
- Fix remote code execution in cssp_read_tsrequest - CVE-2018-8793
- Fix Denial of Service in process_bitmap_data - CVE-2018-8796
- Fix minor information leak in rdpsnd_process_ping - CVE-2018-8798
- Fix Denial of Service in process_secondary_order - CVE-2018-8799
- Fix remote code execution in in ui_clip_handle_data - CVE-2018-8800
- Fix major information leak in ui_clip_handle_data - CVE-2018-20174
- Fix memory corruption in rdp_in_unistr - CVE-2018-20177
- Fix Denial of Service in process_demand_active - CVE-2018-20178
- Fix remote code execution in lspci_process - CVE-2018-20179
- Fix remote code execution in rdpsnddbg_process - CVE-2018-20180
- Fix remote code execution in seamless_process - CVE-2018-20181
- Fix remote code execution in seamless_process_line - CVE-2018-20182
- Fix building against OpenSSL 1.1
- remove obsolete patches
- rdesktop-Fix-OpenSSL-1.1-compability-issues.patch
- rdesktop-Fix-crash-in-rdssl_cert_to_rkey.patch
- update changes file
- add missing info about bugzilla 1121448
-
Added rdesktop-Fix-decryption.patch Patch from https://github.com/rdesktop/rdesktop/pull/334 to fix connections to VirtualBox.
-
update to 1.8.6
- Fix protocol code handling new licenses
- update to 1.8.5
- Add bounds checking to protocol handling in order to fix many security problems when communicating with a malicious server.
-
Trim redundant wording from description.
-
Use %make_install.
-
update to 1.8.4 (fix for boo#1121448)
- Add rdp_protocol_error function that is used in several fixes
- Refactor of process_bitmap_updates
- Fix possible integer overflow in s_check_rem() on 32bit arch
- Fix memory corruption in process_bitmap_data - CVE-2018-8794
- Fix remote code execution in process_bitmap_data - CVE-2018-8795
- Fix remote code execution in process_plane - CVE-2018-8797
- Fix Denial of Service in mcs_recv_connect_response - CVE-2018-20175
- Fix Denial of Service in mcs_parse_domain_params - CVE-2018-20175
- Fix Denial of Service in sec_parse_crypt_info - CVE-2018-20176
- Fix Denial of Service in sec_recv - CVE-2018-20176
- Fix minor information leak in rdpdr_process - CVE-2018-8791
- Fix Denial of Service in cssp_read_tsrequest - CVE-2018-8792
- Fix remote code execution in cssp_read_tsrequest - CVE-2018-8793
- Fix Denial of Service in process_bitmap_data - CVE-2018-8796
- Fix minor information leak in rdpsnd_process_ping - CVE-2018-8798
- Fix Denial of Service in process_secondary_order - CVE-2018-8799
- Fix remote code execution in in ui_clip_handle_data - CVE-2018-8800
- Fix major information leak in ui_clip_handle_data - CVE-2018-20174
- Fix memory corruption in rdp_in_unistr - CVE-2018-20177
- Fix Denial of Service in process_demand_active - CVE-2018-20178
- Fix remote code execution in lspci_process - CVE-2018-20179
- Fix remote code execution in rdpsnddbg_process - CVE-2018-20180
- Fix remote code execution in seamless_process - CVE-2018-20181 *…
- Record
openSUSE-SU-2019:2135-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11298-1 No score
rdesktop-1.9.0-4.6 on GA media
These are all security issues fixed in the rdesktop-1.9.0-4.6 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11298-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rdesktopAlpine:v3.10 |
before 1.8.6-r0 | 1.8.6-r0 |
rdesktopAlpine:v3.11 |
before 1.8.6-r0 | 1.8.6-r0 |
rdesktopAlpine:v3.12 |
before 1.8.6-r0 | 1.8.6-r0 |
rdesktopAlpine:v3.13 |
before 1.8.6-r0 | 1.8.6-r0 |
rdesktopAlpine:v3.14 |
before 1.8.6-r0 | 1.8.6-r0 |
rdesktopAlpine:v3.15 |
before 1.8.6-r0 | 1.8.6-r0 |
rdesktopAlpine:v3.16 |
before 1.8.6-r0 | 1.8.6-r0 |
rdesktopAlpine:v3.17 |
before 1.8.6-r0 | 1.8.6-r0 |
rdesktopAlpine:v3.18 |
before 1.8.6-r0 | 1.8.6-r0 |
rdesktopAlpine:v3.19 |
before 1.8.6-r0 | 1.8.6-r0 |
Show 16 moreShow less
| Package | Affected | Fixed |
|---|---|---|
rdesktopAlpine:v3.20 |
before 1.8.6-r0 | 1.8.6-r0 |
rdesktopAlpine:v3.21 |
before 1.8.6-r0 | 1.8.6-r0 |
rdesktopAlpine:v3.22 |
before 1.8.6-r0 | 1.8.6-r0 |
rdesktopAlpine:v3.23 |
before 1.8.6-r0 | 1.8.6-r0 |
rdesktopAlpine:v3.24 |
before 1.8.6-r0 | 1.8.6-r0 |
rdesktopDebian:12 |
before 1.8.4-1 | 1.8.4-1 |
rdesktopDebian:13 |
before 1.8.4-1 | 1.8.4-1 |
rdesktopDebian:14 |
before 1.8.4-1 | 1.8.4-1 |
rdesktopDebian:8 |
before 1.8.4-0+deb8u1, plus listed versions 1.8.2-31.8.2-3+deb8u11.8.3-11.8.3-2 |
1.8.4-0+deb8u1 |
rdesktopDebian:9 |
before 1.8.4-1~deb9u1, plus listed versions 1.8.3-2 |
1.8.4-1~deb9u1 |
rdesktopMageia:6 |
before 1.8.4-1.mga6 | 1.8.4-1.mga6 |
rdesktopUbuntu:16.04:LTS |
All versions, plus listed versions 1.8.3-1 |
None known |
rdesktopUbuntu:18.04:LTS |
All versions, plus listed versions 1.8.3-21.8.3-2build1 |
None known |
rdesktopSUSE:Package Hub 15 SP1 |
before 1.8.6-bp151.2.3.1 | 1.8.6-bp151.2.3.1 |
rdesktopopenSUSE:Leap 15.1 |
before 1.8.6-bp151.2.3.1 | 1.8.6-bp151.2.3.1 |
rdesktopopenSUSE:Tumbleweed |
before 1.9.0-4.6 | 1.9.0-4.6 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | affected | OSV |
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
securityfocus.com/bid/106938
github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1
security.gentoo.org/glsa/201903-06
research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients
debian.org/security/2019/dsa-4394
lists.debian.org/debian-lts-announce/2019/02/msg00030.html
Show 35 moreShow less
lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html
nvd.nist.gov/vuln/detail/CVE-2018-8792
security.alpinelinux.org/vuln/CVE-2018-8792
security-tracker.debian.org/tracker/CVE-2018-8792
advisories.mageia.org/MGASA-2019-0041.html
bugs.mageia.org/show_bug.cgi?id=24192
ubuntu.com/security/CVE-2018-8792
cve.org/CVERecord?id=CVE-2018-8792
bugzilla.suse.com/1121448
suse.com/security/cve/CVE-2018-20174
Left out here: the rest of 1 source description. The JSON record has them.