CVE-2020-9498: Medium severity apache guacamole vulnerability
Apache Guacamole 1.1.0 and older may mishandle pointers involved inprocessing data received via RDP static virtual channels. If a userconnects to a malicious or compromised RDP server, a series ofspecially-crafted PDUs could result in memory corruption, possiblyallowing arbitrary code to be executed with the privileges of therunning guacd process.
Affected Software
Event History
Frequently Asked Questions
What is Apache Guacamole 1.1.0 vulnerability (CVE-2020-9498)?
Apache Guacamole 1.1.0 and older versions may mishandle pointers involved in processing data received via RDP static virtual channels, which can lead to memory corruption and potentially allow arbitrary code execution.
How severe is the Apache Guacamole 1.1.0 vulnerability (CVE-2020-9498)?
The severity of the Apache Guacamole 1.1.0 vulnerability (CVE-2020-9498) is medium, with a severity value of 6.7.
Which software versions are affected by the Apache Guacamole 1.1.0 vulnerability (CVE-2020-9498)?
Apache Guacamole 1.1.0 and older versions are affected. Fedora 32 and 33, and Debian Linux 9.0 are also affected.
How can the Apache Guacamole 1.1.0 vulnerability (CVE-2020-9498) be exploited?
If a user connects to a malicious or compromised RDP server, a series of specially-crafted Protocol Data Units (PDUs) could result in memory corruption and potentially allow arbitrary code execution.
Is there a fix available for the Apache Guacamole 1.1.0 vulnerability (CVE-2020-9498)?
Yes, it is recommended to upgrade to a patched version of Apache Guacamole to mitigate the vulnerability. Please refer to the official references for further instructions.