6.5

CVE-2018-1000852: canonical ubuntu_linux Out-of-bounds Read

CVSS: 6.5v3.1MediumModified
AliasesRHSA-2019:2157UBUNTU-CVE-2018-1000852DEBIAN-CVE-2018-1000852
Published 20-12-2018Last modified 05-08-2024
Open JSON

Vulnerability summary

CVE-2018-1000852 is a medium (CVSS 6.5) Out-of-bounds Read vulnerability in canonical ubuntu_linux. EPSS estimates a 2.67% chance of exploitation in the next 30 days, higher than 85.4% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
37/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.5/10
010
Medium · v3.1 (NVD)
EPSS score
2.67%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1github

Advisory lineage

Upstream 0 · Downstream 5 · Related 5
OPENSUSE-SU-2024:10768-1SUSE-SU-2019:0134-1SUSE-SU-2019:0539-1SUSE-SU-2020:2272-1USN-4379-1

Timeline

  1. 20-12-2018
    PublishedVulnerability first disclosed.
  2. 05-08-2024
    Last modifiedVulnerability information updated.

Description

FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvc_main.c, drdynvc_process_capability_request that can result in The RDP server can read the client's memory.. This attack appear to be exploitable via RDPClient must connect the rdp server with echo option. This vulnerability appears to have been fixed in after commit 205c612820dac644d665b5bb1cdf437dc5ca01e3.

CVSS metrics

6 scores · 4 sources · 3 versions

EPSS trend

Probability

2.67%

Chance of exploitation in the next 30 days

Percentile

85%

Versus all other CVEs

30-day change

0.00 pp

From 2.67% on 18-09-2026

18-09-202618-10-2026
EPSS score
2.67%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • githubUnverified

    Freerdp

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Redhat8 products
  • freerdp< 0:2.0.0-1.rc4.el7
  • freerdp-debuginfo< 0:2.0.0-1.rc4.el7
  • freerdp-devel< 0:2.0.0-1.rc4.el7
  • freerdp-libs< 0:2.0.0-1.rc4.el7
  • libwinpr< 0:2.0.0-1.rc4.el7
Canonical1 product
Debian1 product
  • freerdp2< 2.0.0~git20181120.1.e21b72c95+dfsg1-1
Fedoraproject1 product
Freerdp1 product
  • freerdp< 2.0.0 | 2.0.0 | 2.0.0:rc0 | 2.0.0:rc1 | 2.0.0:rc2
Ubuntu1 product
  • freerdp2< 2.1.1+dfsg1-0ubuntu0.18.04.1

6 vendors · 13 products

References

19 links
Show all 19 references