{"schemaVersion":3,"id":"OPENSUSE-SU-2019:2135-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for rdesktop\n\nThis update for rdesktop fixes the following issues:\n\nrdesktop was updated to 1.8.6:\n\n* Fix protocol code handling new licenses\n\nrdesktop was updated to 1.8.5:\n\n* Add bounds checking to protocol handling in order to fix many\n  security problems when communicating with a malicious server.\n\nrdesktop was updated to 1.8.4 (fix for boo#1121448):\n\n* Add rdp_protocol_error function that is used in several fixes\n* Refactor of process_bitmap_updates\n* Fix possible integer overflow in s_check_rem() on 32bit arch\n* Fix memory corruption in process_bitmap_data - CVE-2018-8794\n* Fix remote code execution in process_bitmap_data - CVE-2018-8795\n* Fix remote code execution in process_plane - CVE-2018-8797\n* Fix Denial of Service in mcs_recv_connect_response - CVE-2018-20175\n* Fix Denial of Service in mcs_parse_domain_params - CVE-2018-20175\n* Fix Denial of Service in sec_parse_crypt_info - CVE-2018-20176\n* Fix Denial of Service in sec_recv - CVE-2018-20176\n* Fix minor information leak in rdpdr_process - CVE-2018-8791\n* Fix Denial of Service in cssp_read_tsrequest - CVE-2018-8792\n* Fix remote code execution in cssp_read_tsrequest - CVE-2018-8793\n* Fix Denial of Service in process_bitmap_data - CVE-2018-8796\n* Fix minor information leak in rdpsnd_process_ping - CVE-2018-8798\n* Fix Denial of Service in process_secondary_order - CVE-2018-8799\n* Fix remote code execution in in ui_clip_handle_data - CVE-2018-8800\n* Fix major information leak in ui_clip_handle_data - CVE-2018-20174\n* Fix memory corruption in rdp_in_unistr - CVE-2018-20177\n* Fix Denial of Service in process_demand_active - CVE-2018-20178\n* Fix remote code execution in lspci_process - CVE-2018-20179\n* Fix remote code execution in rdpsnddbg_process - CVE-2018-20180\n* Fix remote code execution in seamless_process - CVE-2018-20181\n* Fix remote code execution in seamless_process_line - CVE-2018-20182\n* Fix building against OpenSSL 1.1\n- remove obsolete patches\n* rdesktop-Fix-OpenSSL-1.1-compability-issues.patch\n* rdesktop-Fix-crash-in-rdssl_cert_to_rkey.patch\n\n- update changes file\n* add missing info about bugzilla 1121448\n\n- Added rdesktop-Fix-decryption.patch\nPatch from https://github.com/rdesktop/rdesktop/pull/334 to fix\nconnections to VirtualBox.\n\n- update to 1.8.6\n* Fix protocol code handling new licenses\n\n- update to 1.8.5\n* Add bounds checking to protocol handling in order to fix many\nsecurity problems when communicating with a malicious server.\n\n- Trim redundant wording from description.\n- Use %make_install.\n\n- update to 1.8.4 (fix for boo#1121448)\n* Add rdp_protocol_error function that is used in several fixes\n* Refactor of process_bitmap_updates\n* Fix possible integer overflow in s_check_rem() on 32bit arch\n* Fix memory corruption in process_bitmap_data - CVE-2018-8794\n* Fix remote code execution in process_bitmap_data - CVE-2018-8795\n* Fix remote code execution in process_plane - CVE-2018-8797\n* Fix Denial of Service in mcs_recv_connect_response - CVE-2018-20175\n* Fix Denial of Service in mcs_parse_domain_params - CVE-2018-20175\n* Fix Denial of Service in sec_parse_crypt_info - CVE-2018-20176\n* Fix Denial of Service in sec_recv - CVE-2018-20176\n* Fix minor information leak in rdpdr_process - CVE-2018-8791\n* Fix Denial of Service in cssp_read_tsrequest - CVE-2018-8792\n* Fix remote code execution in cssp_read_tsrequest - CVE-2018-8793\n* Fix Denial of Service in process_bitmap_data - CVE-2018-8796\n* Fix minor information leak in rdpsnd_process_ping - CVE-2018-8798\n* Fix Denial of Service in process_secondary_order - CVE-2018-8799\n* Fix remote code execution in in ui_clip_handle_data - CVE-2018-8800\n* Fix major information leak in ui_clip_handle_data - CVE-2018-20174\n* Fix memory corruption in rdp_in_unistr - CVE-2018-20177\n* Fix Denial of Service in process_demand_active - CVE-2018-20178\n* Fix remote code execution in lspci_process - CVE-2018-20179\n* Fix remote code execution in rdpsnddbg_process - CVE-2018-20180\n* Fix remote code execution in seamless_process - CVE-2018-20181\n* Fix remote code execution in seamless_process_line - CVE-2018-20182\n* Fix building against OpenSSL 1.1","dates":{"published":"2019-09-14T16:17:10.000Z","modified":"2026-02-04T02:47:34.887Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"opensuse","product":"rdesktop&distro=openSUSE Leap 15.1","name":"rdesktop","label":"rdesktop&distro=openSUSE Leap 15.1","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/rdesktop&distro=openSUSE Leap 15.1","purlType":"rpm","versions":[{"text":"< 1.8.6-bp151.2.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.6-bp151.2.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"rdesktop&distro=SUSE Package Hub 15 SP1","name":"rdesktop","label":"rdesktop&distro=SUSE Package Hub 15 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/rdesktop&distro=SUSE Package Hub 15 SP1","purlType":"rpm","versions":[{"text":"< 1.8.6-bp151.2.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.6-bp151.2.3.1","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5MCVZLNEOZHBW55VIVPPCJCYS3FNB6ZZ/#5MCVZLNEOZHBW55VIVPPCJCYS3FNB6ZZ","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1121448","label":"bugzilla.suse.com/1121448","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20174","label":"www.suse.com/security/cve/CVE-2018-20174","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20175","label":"www.suse.com/security/cve/CVE-2018-20175","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20176","label":"www.suse.com/security/cve/CVE-2018-20176","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20177","label":"www.suse.com/security/cve/CVE-2018-20177","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20178","label":"www.suse.com/security/cve/CVE-2018-20178","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20179","label":"www.suse.com/security/cve/CVE-2018-20179","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20180","label":"www.suse.com/security/cve/CVE-2018-20180","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20181","label":"www.suse.com/security/cve/CVE-2018-20181","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20182","label":"www.suse.com/security/cve/CVE-2018-20182","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8791","label":"www.suse.com/security/cve/CVE-2018-8791","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8792","label":"www.suse.com/security/cve/CVE-2018-8792","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8793","label":"www.suse.com/security/cve/CVE-2018-8793","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8794","label":"www.suse.com/security/cve/CVE-2018-8794","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8795","label":"www.suse.com/security/cve/CVE-2018-8795","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8796","label":"www.suse.com/security/cve/CVE-2018-8796","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8797","label":"www.suse.com/security/cve/CVE-2018-8797","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8798","label":"www.suse.com/security/cve/CVE-2018-8798","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8799","label":"www.suse.com/security/cve/CVE-2018-8799","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8800","label":"www.suse.com/security/cve/CVE-2018-8800","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2018-20174","CVE-2018-20175","CVE-2018-20176","CVE-2018-20177","CVE-2018-20178","CVE-2018-20179","CVE-2018-20180","CVE-2018-20181","CVE-2018-20182","CVE-2018-8791","CVE-2018-8792","CVE-2018-8793","CVE-2018-8794","CVE-2018-8795","CVE-2018-8796","CVE-2018-8797","CVE-2018-8798","CVE-2018-8799","CVE-2018-8800"],"downstream":[],"duplicates":[],"related":["CVE-2018-20174","CVE-2018-20175","CVE-2018-20176","CVE-2018-20177","CVE-2018-20178","CVE-2018-20179","CVE-2018-20180","CVE-2018-20181","CVE-2018-20182","CVE-2018-8791","CVE-2018-8792","CVE-2018-8793","CVE-2018-8794","CVE-2018-8795","CVE-2018-8796","CVE-2018-8797","CVE-2018-8798","CVE-2018-8799","CVE-2018-8800"]},"timeline":[{"kind":"published","date":"2019-09-14T16:17:10.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T02:47:34.887Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T01:47:35.888Z","stale":false,"partial":false}}