CVE:CVE-2018-8798
CNNVD:CNNVD-201902-086
rdesktop是一款开源的远程桌面客户端程序。
rdesktop v1.8.3版本及之前版本中‘rdpsnd_process_ping’函数存在越界读取漏洞。攻击者可利用该漏洞泄露信息。
solution:Upgrade rdesktop rdesktop to a higher version than 1.8.3,and avoid the version (,1.8.3]; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0