CVE-2023-30576

Name of the Vulnerable Software and Affected Versions Apache Guacamole versions 0.9.10 through 1.5.1

Description The issue allows an attacker to execute arbitrary code with the privileges of the guacd process, depending on timing, as Apache Guacamole may continue to reference a freed RDP audio input buffer.

Recommendations For Apache Guacamole versions 0.9.10 through 1.5.1, update to a version that fixes the issue with referencing freed RDP audio input buffers to prevent arbitrary code execution with the privileges of the guacd process.