rdesktop seamless_process_line() Buffer Overflow Memory Corruption Vulnerability [CVE-2018-20182]

CVE Number – CVE-2018-20182

A vulnerability in the seamless_process_line() function in rdesktop could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system.The vulnerability is due to a buffer overflow over global variables that exists in the seamless_process() function of the affected software. An attacker could exploit this vulnerability by persuading a user who is using a Remote Desktop Protocol (RDP) client to connect to a malicious RDP server. A successful exploit could allow the attacker to corrupt memory and potentially execute arbitrary code on the targeted system.Proof-of-concept (PoC) code that demonstrates an exploit of this vulnerability is publicly available.rdesktop has confirmed this vulnerability and has release an update.

Analysis

• To exploit this vulnerability, an attacker may use misleading language or instructions to persuade a user to connect to a malicious RDP server.
  

Safeguards

• Administrators are advised to apply the appropriate updates.    
  Administrators are advised to allow only trusted users to have network access.    
  Administrators are advised to run both firewall and antivirus applications to minimize the potential of inbound and outbound threats.    
  Administrators may consider using IP-based access control lists (ACLs) to allow only trusted systems to access the affected systems.    
  Administrators can help protect affected systems from external attacks by using a solid firewall strategy.

Vendor Announcements

• rdesktop has released a git commit at the following link: RDP Sever Security Fixes
  

Fixed Software

• rdesktop has issued a patch at the following link: rdesktop v1.8.4