Aller au contenu
Se connecter
Non notée

CVE-2020-9497 Apache Guacamole 1.1.0 and older do not properly validate datareceived from RDP servers via static virtual channels

Description

Apache Guacamole 1.1.0 and older do not properly validate datareceived from RDP servers via static virtual channels. If a userconnects to a malicious or compromised RDP server, specially-craftedPDUs could result in disclosure of information within the memory ofthe guacd process handling the connection.

Produits et versions touchés

Produit Versions touchées Corrigé en
Apache Guacamole Versions non publiées

Autres CVE de Apache Guacamole

Les 3 CVE de Apache Guacamole →
CVE-2020-11997 Apache Guacamole 1.2.0 and earlier do not consistently restrict access to connection history based on user visibility Non notée CVE-2020-9498 Apache Guacamole 1.1.0 and older may mishandle pointers involved inprocessing data received via RDP static virtual… Non notée
Suivre cette CVE