Aller au contenu
Se connecter
Non notée

CVE-2020-9498 Apache Guacamole 1.1.0 and older may mishandle pointers involved inprocessing data received via RDP static virtual…

Description

Apache Guacamole 1.1.0 and older may mishandle pointers involved inprocessing data received via RDP static virtual channels. If a userconnects to a malicious or compromised RDP server, a series ofspecially-crafted PDUs could result in memory corruption, possiblyallowing arbitrary code to be executed with the privileges of therunning guacd process.

Produits et versions touchés

Produit Versions touchées Corrigé en
Apache Guacamole Versions non publiées

Autres CVE de Apache Guacamole

Les 3 CVE de Apache Guacamole →
CVE-2020-11997 Apache Guacamole 1.2.0 and earlier do not consistently restrict access to connection history based on user visibility Non notée CVE-2020-9497 Apache Guacamole 1.1.0 and older do not properly validate datareceived from RDP servers via static virtual channels Non notée
Suivre cette CVE