CVE-2023-43826

概要

参考情報

• openwall.com/lists/oss-security/2023/12/19/4 · Mailing List
• lists.apache.org/thread/23gzwftpfgtq97tj6ttmbclry53kmwv6 · Mailing List

guacamole のその他の脆弱性

• CVE-2024-35164高 7.5The terminal emulator of Apache Guacamole 1.5.5 and older does not properly validate console codes received from servers via text-based prot…
• CVE-2023-30576高 8.1Apache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer. Depending on timing, this may allow an attac…
• CVE-2023-30575高 7.5Apache Guacamole 1.5.1 and older may incorrectly calculate the lengths of instruction elements sent during the Guacamole protocol handshake,…
• CVE-2021-43999高 8.8Apache Guacamole 1.2.0 and 1.3.0 do not properly validate responses received from a SAML identity provider. If SAML support is enabled, this…
• CVE-2021-41767中 6.5Apache Guacamole 1.3.0 and older may incorrectly include a private tunnel identifier in the non-private details of some REST responses. This…