CVE:CVE-2018-8795
CNNVD:CNNVD-201902-084
rdesktop是一款开源的远程桌面客户端程序。
rdesktop v1.8.3版本及之前版本中‘process_bitmap_updates’函数存在整数溢出漏洞。远程攻击者可利用该漏洞损坏内存并可能执行代码。
solution:Upgrade rdesktop rdesktop to a higher version than 1.8.3,and avoid the version (,1.8.3]; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1