CVE-2023-30575

Published: Jun 7, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Apache Guacamole 1.5.1 and older may incorrectly calculate the lengths of instruction elements sent during the Guacamole protocol handshake, potentially allowing an attacker to inject Guacamole instructions during the handshake through specially-crafted data.

Affected (1)

Products: Apache: Guacamole

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apache Guacamole	Before 1.5.2

Related CWEs

Incorrect Calculation of Buffer Size

The product does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.

References (2)

https://lists.apache.org/thread/tn63n2lon0h5p45oft834t1dqvvxownv

Source: security@apache.org

Mailing ListThird Party Advisory

https://lists.apache.org/thread/tn63n2lon0h5p45oft834t1dqvvxownv

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

Timeline

No history available yet.