Lucene search

GoogleOSV:CVE-2023-30576

HistoryJun 07, 2023 - 9:15 a.m.

CVE-2023-30576

2023-06-0709:15:10

Google

osv.dev

apache guacamole

rdp

audio

buffer

vulnerability

arbitrary code

guacd process

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.5%

JSON

Apache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer. Depending on timing, this may allow an attacker to execute arbitrary code with the privileges of the guacd process.

CPENameOperatorVersion
guacamole-servereq0.9.13-incubating-RC1
guacamole-servereq1.3.0
guacamole-servereq1.4.0
guacamole-servereq0.9.12-incubating
guacamole-servereq0.9.6
guacamole-servereq0.9.10-incubating-RC2
guacamole-servereq1.0.0
guacamole-servereq0.9.1
guacamole-servereq0.9.11-incubating
guacamole-servereq0.9.10-incubating

Name	Operator	Version
guacamole-server	eq	0.9.13-incubating-RC1
guacamole-server	eq	1.3.0
guacamole-server	eq	1.4.0
guacamole-server	eq	0.9.12-incubating
guacamole-server	eq	0.9.6
guacamole-server	eq	0.9.10-incubating-RC2
guacamole-server	eq	1.0.0
guacamole-server	eq	0.9.1
guacamole-server	eq	0.9.11-incubating
guacamole-server	eq	0.9.10-incubating

Rows per page:

1-10 of 361

References

lists.apache.org/thread/vgtvxb3w7mm84hx6v8dfc0onsoz05gb6

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.5%

JSON

Related for OSV:CVE-2023-30576