Skip to content
Sign in
Not rated

CVE-2020-9497 Apache Guacamole 1.1.0 and older do not properly validate datareceived from RDP servers via static virtual channels

Description

Apache Guacamole 1.1.0 and older do not properly validate datareceived from RDP servers via static virtual channels. If a userconnects to a malicious or compromised RDP server, specially-craftedPDUs could result in disclosure of information within the memory ofthe guacd process handling the connection.

Affected products and versions

Product Affected versions Fixed in
Apache Guacamole Versions not published

Other CVEs of Apache Guacamole

The 3 CVEs of Apache Guacamole →
CVE-2020-11997 Apache Guacamole 1.2.0 and earlier do not consistently restrict access to connection history based on user visibility Not rated CVE-2020-9498 Apache Guacamole 1.1.0 and older may mishandle pointers involved inprocessing data received via RDP static virtual… Not rated
Track this CVE