| Package | Affected versions | Patched versions |
|---|---|---|
| guacamole | ≤ 1.1.0 |
Apache Guacamole 1.1.0 and older may mishandle pointers involved inprocessing data received via RDP static virtual channels. If a userconnects to a malicious or compromised RDP server, a series ofspecially-crafted PDUs could result in memory corruption, possiblyallowing arbitrary code to be executed with the privileges of therunning guacd process.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free