alpine · CVE-2018-8785

Quick triage

Priority: critical Published: Updated:

View at Official alpine advisory, NVD, CVE.org · CVE detail

Freshness: no update timestamp found; verify against the upstream OS advisory manually.

Tracker summary

CVE-2018-8785: 1 source package rows (freerdp); 4 state rows across 2 repos (3.22-community, edge-community); fixed 0, open 4.

Description:

FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress() that results in a memory corruption and probably even a remote code execution.

cvelogic Threat Intelligence