rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_secondary_order() that results in a Denial of Service (segfault).
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
The product reads data past the end, or before the beginning, of the intended buffer.
| Link | Tags |
|---|---|
| http://www.securityfocus.com/bid/106938 | vdb entry third party advisory |
| https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1 | third party advisory patch |
| https://security.gentoo.org/glsa/201903-06 | third party advisory vendor advisory |
| https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ | third party advisory |
| https://www.debian.org/security/2019/dsa-4394 | third party advisory vendor advisory |
| https://lists.debian.org/debian-lts-announce/2019/02/msg00030.html | third party advisory mailing list |
| http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html | vendor advisory |