CVE-2023-30575: Apache Guacamole: Incorrect calculation of Guacamole protocol element lengths
Published Jun 7, 2023
·Updated
Apache Guacamole 1.5.1 and older may incorrectly calculate the lengths of instruction elements sent during the Guacamole protocol handshake, potentially allowing an attacker to inject Guacamole instructions during the handshake through specially-crafted data.
Affected Software
1 affected component
Apache Guacamole<1.5.2
Event History
Jun 7, 2023
CVE Published
via MITRE·08:06 AM
Data Sourced
via MITRE·08:06 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this Apache Guacamole vulnerability?
The vulnerability ID for this Apache Guacamole vulnerability is CVE-2023-30575.
2
What is the severity of CVE-2023-30575?
The severity of CVE-2023-30575 is high with a score of 7.5.
3
How does Apache Guacamole 1.5.1 and older handle instruction elements during the handshake?
Apache Guacamole 1.5.1 and older may incorrectly calculate the lengths of instruction elements sent during the handshake.
4
What is the potential impact of this vulnerability?
This vulnerability could allow an attacker to inject Guacamole instructions during the handshake through specially-crafted data.
5
Is there a fix for this vulnerability?
Yes, the fix is available in Apache Guacamole version 1.5.2 and newer.