CVE-2008-1801: rdesktop Numeric Errors

EPSS trend

Probability

13.13%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 13.13% on 19-09-2026

19-09-202619-10-2026

EPSS score

13.13%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (rdesktop.cvs.sourceforge.net)
Maturity: unknown
exploit-databasedoslinuxVerified
rdesktop 1.5.0 - 'iso_recv_msg()' Integer Underflow (PoC)
Maturity: poc

References

40 links

secunia.com/advisories/31224Third Party AdvisoryX Refsource SECUNIA
rdesktop.cvs.sourceforge.net/rdesktop/rdesktop/iso.c?r1=1.19&r2=1.20&pathrev=HEADX Refsource CONFIRMExploit
www.exploit-db.com/exploits/5561ExploitX Refsource EXPLOIT DB
secunia.com/advisories/30118Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/usn-646-1Vendor AdvisoryX Refsource UBUNTU
security.gentoo.org/glsa/glsa-200806-04.xmlVendor AdvisoryX Refsource GENTOO
www.redhat.com/archives/fedora-package-announce/2008-May/msg00270.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/30713Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/42272VDB EntryX Refsource XF
www.securitytracker.com/id?1019990VDB EntryX Refsource SECTRACK

Show all 40 references

slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.395286Vendor AdvisoryX Refsource SLACKWARE
www.debian.org/security/2008/dsa-1573Vendor AdvisoryX Refsource DEBIAN
www.redhat.com/archives/fedora-package-announce/2008-May/msg00244.htmlVendor AdvisoryX Refsource FEDORA
www.redhat.com/support/errata/RHSA-2008-0725.htmlVendor AdvisoryX Refsource REDHAT
www.vupen.com/english/advisories/2008/2403VDB EntryX Refsource VUPEN
www.redhat.com/archives/fedora-package-announce/2008-May/msg00296.htmlVendor AdvisoryX Refsource FEDORA
www.securityfocus.com/bid/29097VDB EntryX Refsource BID
sunsolve.sun.com/search/document.do?assetkey=1-26-240708-1Vendor AdvisoryX Refsource SUNALERT
secunia.com/advisories/30380Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/1467/referencesVDB EntryX Refsource VUPEN
www.mandriva.com/security/advisories?name=MDVSA-2008:101Vendor AdvisoryX Refsource MANDRIVA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11570VDB EntrySignatureX Refsource OVAL
www.redhat.com/support/errata/RHSA-2008-0576.htmlVendor AdvisoryX Refsource REDHAT
support.avaya.com/elmodocs2/security/ASA-2008-360.htmX Refsource CONFIRM
labs.idefense.com/intelligence/vulnerabilities/display.php?id=696Third Party AdvisoryX Refsource IDEFENSE
www.redhat.com/support/errata/RHSA-2008-0575.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/30248Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/31928Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/31222Third Party AdvisoryX Refsource SECUNIA
access.redhat.com/errata/RHSA-2008:0576Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=445825REPORT
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0576.jsonAdvisory
access.redhat.com/security/cve/CVE-2008-1801REPORT
www.cve.org/CVERecord?id=CVE-2008-1801Advisory
nvd.nist.gov/vuln/detail/CVE-2008-1801Advisory
access.redhat.com/errata/RHSA-2008:0725Advisory
bugzilla.redhat.com/show_bug.cgi?id=164462REPORT
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0725.jsonAdvisory
security-tracker.debian.org/tracker/CVE-2008-1801Advisory

Related vulnerabilities

CVE-2026-112279debianrdesktop+113h ago19-10-2026 13:55rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_bmpcache2() in orders.c that allows malicious RDP servers to crash clients via crafted revision-2 bitmap cache orders. Attackers can send an uncompressed order with large width/height or an underflowing mode nibble and short payload, causing memcpy() reads past the receive buffer and denial of service.CVE-2026-112278debianrdesktop+113h ago19-10-2026 13:55rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_raw_bmpcache() in orders.c that allows malicious RDP servers to crash clients. Attackers can send a raw bitmap cache order declaring large width, height, and bpp values with a tiny payload, causing memcpy() to read past the receive buffer and crash the client.CVE-2026-112277debianrdesktop+113h ago19-10-2026 13:55rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_plane() in bitmap.c that allows malicious RDP servers to crash clients by sending malformed 32 bpp compressed bitmaps. Attackers can declare a large bitmap geometry with a short compressed body in bitmap update PDUs or bitmap cache orders, causing unbounded reads past the receive buffer and denial of service.CVE-2018-20182alpinerdesktop+48.21%7y ago15-03-2019 18:00rdesktop versions up to and including v1.8.3 contain a Buffer Overflow over the global variables in the function seamless_process_line() that results in memory corruption and probably even a remote code execution.CVE-2018-20179alpinerdesktop+36.79%7y ago15-03-2019 18:00rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function lspci_process() and results in memory corruption and probably even a remote code execution.CVE-2018-20176alpinerdesktop+33.60%7y ago15-03-2019 18:00rdesktop versions up to and including v1.8.3 contain several Out-Of- Bounds Reads in the file secure.c that result in a Denial of Service (segfault).

All vulnerabilities inrdesktop

CVE-2008-1801: rdesktop Numeric Errors

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References