CVE-2019-15682
published 2019-10-30CVE-2019-15682: RDesktop version 1.8.4 contains multiple out-of-bound access read vulnerabilities in its code, which results in a denial of service (DoS) condition. This…
PriorityP335high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
1.39%
69.4th percentile
RDesktop version 1.8.4 contains multiple out-of-bound access read vulnerabilities in its code, which results in a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. These issues have been fixed in version 1.8.5
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | rdesktop | < rdesktop 1.8.6-1 (bookworm) | rdesktop 1.8.6-1 (bookworm) |
| rdesktop | rdesktop | — | — |
| rdesktop | rdesktop | >= 0 < 1.8.6-1 | 1.8.6-1 |
| rdesktop | rdesktop | >= 0 < 1.8.6-1 | 1.8.6-1 |
| rdesktop | rdesktop | >= 0 < 1.8.6-1 | 1.8.6-1 |
| rdesktop | rdesktop | >= 0 < 1.8.6-1 | 1.8.6-1 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
rdesktop: multiple out-of-bound access read vulnerabilities
vendor_redhat·2019-10-30·CVSS 7.5
CVE-2019-15682 [HIGH] CWE-125 rdesktop: multiple out-of-bound access read vulnerabilities
rdesktop: multiple out-of-bound access read vulnerabilities
RDesktop version 1.8.4 contains multiple out-of-bound access read vulnerabilities in its code, which results in a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. These issues have been fixed in version 1.8.5
Package: rdesktop (Red Hat Enterprise Linux 5) - Out of support scope
Package: rdesktop (Red Hat Enterprise Linux 6) - Out of support scope
Debian
CVE-2019-15682: rdesktop - RDesktop version 1.8.4 contains multiple out-of-bound access read vulnerabilitie...
vendor_debian·2019·CVSS 7.5
CVE-2019-15682 [HIGH] CVE-2019-15682: rdesktop - RDesktop version 1.8.4 contains multiple out-of-bound access read vulnerabilitie...
RDesktop version 1.8.4 contains multiple out-of-bound access read vulnerabilities in its code, which results in a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. These issues have been fixed in version 1.8.5
Scope: local
bookworm: resolved (fixed in 1.8.6-1)
bullseye: resolved (fixed in 1.8.6-1)
forky: resolved (fixed in 1.8.6-1)
sid: resolved (fixed in 1.8.6-1)
trixie: resolved (fixed in 1.8.6-1)
GHSA
GHSA-xgmg-76mg-xw4g: RDesktop version 1
ghsa_unreviewed·2022-05-24
CVE-2019-15682 [HIGH] CWE-125 GHSA-xgmg-76mg-xw4g: RDesktop version 1
RDesktop version 1.8.4 contains multiple out-of-bound access read vulnerabilities in its code, which results in a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. These issues have been fixed in version 1.8.5
OSV
CVE-2019-15682: RDesktop version 1
osv·2019-10-30·CVSS 7.5
CVE-2019-15682 [HIGH] CVE-2019-15682: RDesktop version 1
RDesktop version 1.8.4 contains multiple out-of-bound access read vulnerabilities in its code, which results in a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. These issues have been fixed in version 1.8.5
No detection rules found.
No public exploits indexed.
2019-10-30
Published