CVE-2018-8787
freerdp2-shadow-x11: FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in functio...
CVE-2018-8787 is fixed in 56 products on 1 platform, first by freerdp-x11 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1, released November 28, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0836
94th percentile
FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and results in a memory corruption and probably even a remote code execution.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| freerdp-x11 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | freerdp-x11 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| freerdp2-shadow-x11 · Ubuntu 18.04.6 LTS (bionic) | 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | freerdp2-shadow-x11 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | Nov 28, 2018 |
| freerdp2-wayland · Ubuntu 18.04.6 LTS (bionic) | 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | freerdp2-wayland 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | Nov 28, 2018 |
| freerdp2-x11 · Ubuntu 18.04.6 LTS (bionic) | 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | freerdp2-x11 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | Nov 28, 2018 |
| libfreerdp-cache1.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libfreerdp-cache1.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libfreerdp-client1.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libfreerdp-client1.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libfreerdp-client2-2 · Ubuntu 18.04.6 LTS (bionic) | 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | libfreerdp-client2-2 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | Nov 28, 2018 |
| libfreerdp-codec1.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libfreerdp-codec1.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libfreerdp-common1.1.0 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libfreerdp-common1.1.0 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libfreerdp-core1.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libfreerdp-core1.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libfreerdp-crypto1.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libfreerdp-crypto1.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libfreerdp-gdi1.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libfreerdp-gdi1.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libfreerdp-locale1.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libfreerdp-locale1.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libfreerdp-plugins-standard · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libfreerdp-plugins-standard 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libfreerdp-primitives1.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libfreerdp-primitives1.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libfreerdp-rail1.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libfreerdp-rail1.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libfreerdp-server2-2 · Ubuntu 18.04.6 LTS (bionic) | 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | libfreerdp-server2-2 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | Nov 28, 2018 |
| libfreerdp-shadow-subsystem2-2 · Ubuntu 18.04.6 LTS (bionic) | 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | libfreerdp-shadow-subsystem2-2 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | Nov 28, 2018 |
| libfreerdp-shadow2-2 · Ubuntu 18.04.6 LTS (bionic) | 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | libfreerdp-shadow2-2 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | Nov 28, 2018 |
| libfreerdp-utils1.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libfreerdp-utils1.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libfreerdp2-2 · Ubuntu 18.04.6 LTS (bionic) | 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | libfreerdp2-2 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | Nov 28, 2018 |
| libuwac0-0 · Ubuntu 18.04.6 LTS (bionic) | 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | libuwac0-0 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | Nov 28, 2018 |
| libwinpr-asn1-0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-asn1-0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-bcrypt0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-bcrypt0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-credentials0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-credentials0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-credui0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-credui0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-crt0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-crt0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-crypto0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-crypto0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-dsparse0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-dsparse0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-environment0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-environment0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-error0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-error0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-file0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-file0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-handle0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-handle0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-heap0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-heap0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-input0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-input0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-interlocked0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-interlocked0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-io0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-io0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-library0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-library0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-path0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-path0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-pipe0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-pipe0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-pool0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-pool0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-registry0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-registry0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-rpc0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-rpc0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-sspi0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-sspi0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-sspicli0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-sspicli0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-synch0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-synch0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-sysinfo0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-sysinfo0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-thread0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-thread0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-timezone0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-timezone0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-tools2-2 · Ubuntu 18.04.6 LTS (bionic) | 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | libwinpr-tools2-2 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | Nov 28, 2018 |
| libwinpr-utils0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-utils0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-winhttp0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-winhttp0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr-winsock0.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libwinpr-winsock0.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| libwinpr2-2 · Ubuntu 18.04.6 LTS (bionic) | 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | libwinpr2-2 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | Nov 28, 2018 |
| libxfreerdp-client1.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | libxfreerdp-client1.1 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1 | Nov 28, 2018 |
| winpr-utils · Ubuntu 18.04.6 LTS (bionic) | 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | winpr-utils 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1 | Nov 28, 2018 |