Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-01020
HistoryDec 21, 2023 - 12:00 a.m.

Apache Guacamole Integer Overflow Vulnerability

2023-12-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
apache guacamole
integer overflow
vulnerability
version 1.5.3
remote desktop
vnc
rdp
ssh
arbitrary code execution
guacd process

8.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.7%

Apache Guacamole is a clientless remote desktop gateway from the Apache (USA) Foundation. The product supports protocols such as VNC, RDP and SSH. An integer overflow vulnerability exists in Apache Guacamole 1.5.3 and earlier versions, which can be exploited by an attacker to execute arbitrary code using the privileges of a running guacd process.

CPENameOperatorVersion
apache guacamolele1.5.3

8.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.7%

Related for CNVD-2024-01020