CVE-2018-20178: Debian Linux

High severity, CVSS 7.5. EPSS: 4.3% chance of exploitation in the next 30 days.

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function process_demand_active() that results in a Denial of Service (segfault).

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only
• Rdesktop Rdesktop: up to and including 1.8.3

Published 2019-03-15. Last modified 2026-06-17.