CVE-2018-8784
freerdp2-shadow-x11: FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress_segment() that r...
CVE-2018-8784 is fixed in 12 products on 1 platform, first by freerdp2-shadow-x11 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1, released November 28, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0729
94th percentile
FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress_segment() that results in a memory corruption and probably even a remote code execution.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| freerdp2-shadow-x11 · Ubuntu 18.04.6 LTS (bionic) | 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | freerdp2-shadow-x11 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | Nov 28, 2018 |
| freerdp2-wayland · Ubuntu 18.04.6 LTS (bionic) | 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | freerdp2-wayland 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | Nov 28, 2018 |
| freerdp2-x11 · Ubuntu 18.04.6 LTS (bionic) | 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | freerdp2-x11 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | Nov 28, 2018 |
| libfreerdp-client2-2 · Ubuntu 18.04.6 LTS (bionic) | 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | libfreerdp-client2-2 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | Nov 28, 2018 |
| libfreerdp-server2-2 · Ubuntu 18.04.6 LTS (bionic) | 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | libfreerdp-server2-2 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | Nov 28, 2018 |
| libfreerdp-shadow-subsystem2-2 · Ubuntu 18.04.6 LTS (bionic) | 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | libfreerdp-shadow-subsystem2-2 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | Nov 28, 2018 |
| libfreerdp-shadow2-2 · Ubuntu 18.04.6 LTS (bionic) | 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | libfreerdp-shadow2-2 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | Nov 28, 2018 |
| libfreerdp2-2 · Ubuntu 18.04.6 LTS (bionic) | 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | libfreerdp2-2 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | Nov 28, 2018 |
| libuwac0-0 · Ubuntu 18.04.6 LTS (bionic) | 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | libuwac0-0 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | Nov 28, 2018 |
| libwinpr-tools2-2 · Ubuntu 18.04.6 LTS (bionic) | 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | libwinpr-tools2-2 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | Nov 28, 2018 |
| libwinpr2-2 · Ubuntu 18.04.6 LTS (bionic) | 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | libwinpr2-2 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | Nov 28, 2018 |
| winpr-utils · Ubuntu 18.04.6 LTS (bionic) | 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | winpr-utils 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | Nov 28, 2018 |