6.8
Medium
CVE-2023-30576 Apache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer
Description
Apache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer. Depending on timing, this may allow an attacker to execute arbitrary code with the privileges of the guacd process.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Guacamole 0.9 | 0.9.10 → 1.5.1 | No fix stated |
| guacamole 0.9 | 0.9.10 → 1.5.1 | No fix stated |
Other CVEs of Apache Guacamole
The 8 CVEs of Apache Guacamole →
CVE-2024-35164
The terminal emulator of Apache Guacamole 1.5.5 and older does not properly validate console codes received from servers…
6.8
Medium
CVE-2023-43826
Apache Guacamole 1.5.3 and older do not consistently ensure that values received from a VNC server will not result in…
7.5
High
CVE-2023-30575
Apache Guacamole 1.5.1 and older may incorrectly calculate the lengths of instruction elements sent during the Guacamole…
6.5
Medium
CVE-2021-43999
Apache Guacamole 1.2.0 and 1.3.0 do not properly validate responses received from a SAML identity provider
Not rated