GU
Product
Guacamole
13
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 5Low 0
Watch
Add Guacamole to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-43826 | 8.8 | Dec 19 | Apache Guacamole 1.5.3 and older do not consistently ensure that values received from a VNC server will not result in integer overflow Affected: through 1.5.3 |
| CVE-2021-43999 | 8.8 | Jan 11 | Apache Guacamole 1.2.0 and 1.3.0 do not properly validate responses received from a SAML identity provider Affected: 1.2.0; 1.3.0 |
| CVE-2023-30576 | 8.1 | Jun 7 | Apache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer Affected: 0.9.0 before 1.5.2 |
| CVE-2017-3158 | 8.1 | Jan 18 | A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of blocks of printed data to overlap Affected: through 0.9.9; 0.9.10-incubating |
| CVE-2024-35164 | 7.5 | Jul 2 | The terminal emulator of Apache Guacamole 1.5.5 and older does not properly validate console codes received from servers via text-based protocols like SSH Affected: 0.8.0 before 1.6.0 |
| CVE-2023-30575 | 7.5 | Jun 7 | Apache Guacamole 1.5.1 and older may incorrectly calculate the lengths of instruction elements sent during the Guacamole protocol handshake, potentially allowing an attacker to… Affected: before 1.5.2 |
| CVE-2019-19603 | 7.5 | Dec 9 | SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash Affected: 1.3.0 |
| CVE-2018-1340 | 7.5 | Feb 7 | Prior to 1.0.0, Apache Guacamole used a cookie for client-side storage of the user's session token Affected: through 0.9.14 |
Showing 8