CVE Feed

    Dashboard / CVE / CVE-2019-15682

    CVE-2019-15682

    RDesktop version 1.8.4 contains multiple out-of-bound access read vulnerabilities in its code, which results in a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. These issues have been fixed in version 1.8.5

    Published:Oct 30, 2019
    Last Modified:Nov 21, 2024
    EPS:Oct 30, 2019
    EPSS Score:0.00435
    CVSS Score:7.5

    Affected Products

    Vendor
    Rdesktop
    Product
    Rdesktop

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2018-20178 (CVSS 7.5) — rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function process_demand_acti…
    CVE-2018-8794 (CVSS 9.8) — rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to an Out-Of-Bounds Write …
    CVE-2018-20182 (CVSS 9.8) — rdesktop versions up to and including v1.8.3 contain a Buffer Overflow over the global variables in the functi…
    CVE-2018-8791 (CVSS 7.5) — rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdr_process() that re…
    CVE-2018-8792 (CVSS 7.5) — rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() t…
    CVE-2018-20180 (CVSS 9.8) — rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Ov…
    CVE-2018-8798 (CVSS 7.5) — rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsnd_process_ping() t…
    CVE-2018-8799 (CVSS 7.5) — rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_secondary_order…
    CVE-2018-8800 (CVSS 9.8) — rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function ui_clip_handle_d…
    CVE-2018-20176 (CVSS 7.5) — rdesktop versions up to and including v1.8.3 contain several Out-Of- Bounds Reads in the file secure.c that re…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High