Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-30576


Apache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer. Depending on timing, this may allow an attacker to execute arbitrary code with the privileges of the guacd process.


Published

2023-06-07T09:15:10.080

Last Modified

2024-11-21T08:00:27.013

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.8 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-416

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application apache guacamole < 1.5.2 Yes

References