PT-2023-22796

CVE-2023-30575

·

Published

2023-06-07

·

Updated

2025-01-29

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Apache Guacamole versions 1.5.1 and older
Description The issue arises from incorrect calculations of instruction element lengths during the Guacamole protocol handshake. This could allow an attacker to inject Guacamole instructions through specially-crafted data.
Recommendations For Apache Guacamole versions 1.5.1 and older, update to a version newer than 1.5.1 to resolve the issue.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-131: Incorrect Calculation of Buffer Size
Related identifiers
CVE-2023-30575
ALT-PU-2023-5017
ALT-PU-2023-5018
ALT-PU-2024-16343
ALT-PU-2024-6761
ALT-PU-2024-8914
ALT-PU-2024-8918
ALT-PU-2025-2021
BIT-GUACAMOLE-2023-30575
BIT-GUACAMOLE-SERVER-2023-30575
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com