Поиск уязвимостей
Количество 8
Количество 8
GHSA-hhj4-xc5f-6f87
Apache Guacamole 1.5.3 and older do not consistently ensure that values received from a VNC server will not result in integer overflow. If a user connects to a malicious or compromised VNC server, specially-crafted data could result in memory corruption, possibly allowing arbitrary code to be executed with the privileges of the running guacd process. Users are recommended to upgrade to version 1.5.4, which fixes this issue.
CVE-2023-43826
Apache Guacamole 1.5.3 and older do not consistently ensure that values received from a VNC server will not result in integer overflow. If a user connects to a malicious or compromised VNC server, specially-crafted data could result in memory corruption, possibly allowing arbitrary code to be executed with the privileges of the running guacd process. Users are recommended to upgrade to version 1.5.4, which fixes this issue.
CVE-2023-43826
Apache Guacamole 1.5.3 and older do not consistently ensure that values received from a VNC server will not result in integer overflow. If a user connects to a malicious or compromised VNC server, specially-crafted data could result in memory corruption, possibly allowing arbitrary code to be executed with the privileges of the running guacd process. Users are recommended to upgrade to version 1.5.4, which fixes this issue.
CVE-2023-43826
Apache Guacamole 1.5.3 and older do not consistently ensure that value ...
ALT-PU-2023-8341
ALT-PU-2023-8341: package `guacamole-server` update to version 1.5.4-alt1
ALT-PU-2023-8340
ALT-PU-2023-8340: package `guacamole` update to version 1.5.4-alt1
ALT-PU-2024-8918
ALT-PU-2024-8918: package `guacamole-server` update to version 1.5.5-alt1
ALT-PU-2024-8914
ALT-PU-2024-8914: package `guacamole` update to version 1.5.5-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-hhj4-xc5f-6f87 Apache Guacamole 1.5.3 and older do not consistently ensure that values received from a VNC server will not result in integer overflow. If a user connects to a malicious or compromised VNC server, specially-crafted data could result in memory corruption, possibly allowing arbitrary code to be executed with the privileges of the running guacd process. Users are recommended to upgrade to version 1.5.4, which fixes this issue. | CVSS3: 7.5 | 1% Низкий | почти 3 года назад |
 | CVE-2023-43826 Apache Guacamole 1.5.3 and older do not consistently ensure that values received from a VNC server will not result in integer overflow. If a user connects to a malicious or compromised VNC server, specially-crafted data could result in memory corruption, possibly allowing arbitrary code to be executed with the privileges of the running guacd process. Users are recommended to upgrade to version 1.5.4, which fixes this issue. | CVSS3: 8.8 | 1% Низкий | почти 3 года назад |
 | CVE-2023-43826 Apache Guacamole 1.5.3 and older do not consistently ensure that values received from a VNC server will not result in integer overflow. If a user connects to a malicious or compromised VNC server, specially-crafted data could result in memory corruption, possibly allowing arbitrary code to be executed with the privileges of the running guacd process. Users are recommended to upgrade to version 1.5.4, which fixes this issue. | CVSS3: 8.8 | 1% Низкий | почти 3 года назад |
| CVE-2023-43826 Apache Guacamole 1.5.3 and older do not consistently ensure that value ... | CVSS3: 8.8 | 1% Низкий | почти 3 года назад |
| ALT-PU-2023-8341 ALT-PU-2023-8341: package `guacamole-server` update to version 1.5.4-alt1 | CVSS3: 8.8 | 1% Низкий | почти 3 года назад |
| ALT-PU-2023-8340 ALT-PU-2023-8340: package `guacamole` update to version 1.5.4-alt1 | CVSS3: 8.8 | 1% Низкий | почти 3 года назад |
| ALT-PU-2024-8918 ALT-PU-2024-8918: package `guacamole-server` update to version 1.5.5-alt1 | CVSS3: 8.8 | больше 2 лет назад | |
| ALT-PU-2024-8914 ALT-PU-2024-8914: package `guacamole` update to version 1.5.5-alt1 | CVSS3: 8.8 | больше 2 лет назад |
Уязвимостей на страницу