Bug 2555620 (CVE-2026-112278)
| Summary: | CVE-2026-112278 rdesktop: rdesktop: Denial of Service via heap out-of-bounds read in process_raw_bmpcache | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | rhel-process-autobot, watson-tool-maintainers |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in rdesktop. A malicious Remote Desktop Protocol (RDP) server can exploit an out-of-bounds read vulnerability by sending specially crafted bitmap cache orders specifying large image dimensions alongside an undersized data payload. This causes the client application to read beyond its allocated memory buffer, leading to an immediate crash and a Denial of Service (DoS).
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2556354, 2556355 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-10-19 14:32:15 UTC
|