CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-8786

FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function update_read_bitmap_update() and results in a memory corruption and probably even a remote code execution.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.179

EPSS Ranking 94.8%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2018-8786

Freerdp » Freerdp » Version: N/A

cpe:2.3:a:freerdp:freerdp:-
Freerdp » Freerdp » Version: 1.0.0

cpe:2.3:a:freerdp:freerdp:1.0.0
Freerdp » Freerdp » Version: 1.0.1

cpe:2.3:a:freerdp:freerdp:1.0.1
Freerdp » Freerdp » Version: 1.0.2

cpe:2.3:a:freerdp:freerdp:1.0.2
Freerdp » Freerdp » Version: 1.1.0

cpe:2.3:a:freerdp:freerdp:1.1.0
Freerdp » Freerdp » Version: 1.2.0

cpe:2.3:a:freerdp:freerdp:1.2.0
Freerdp » Freerdp » Version: 2.0.0

cpe:2.3:a:freerdp:freerdp:2.0.0
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04
Canonical » Ubuntu Linux » Version: 18.10

cpe:2.3:o:canonical:ubuntu_linux:18.10
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Fedoraproject » Fedora » Version: 28

cpe:2.3:o:fedoraproject:fedora:28
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Server Aus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6
Redhat » Enterprise Linux Server Eus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6
Redhat » Enterprise Linux Server Tus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-8786

Products

Pricing

Contact Us