GitHub Advisoryadvisory · Maven

GHSA-3vv3-585q-wv6x Apache Guacamole Race Condition vulnerability

HIGH Published 2022-05-14 Modified 2022-11-08 Official page ↗
Aliases
CVE-2017-3158
Ecosystem
Maven
Packages
org.apache.guacamole:guacamole-common
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-362
Reviewed
2022-11-08

Affected packages

• Maven org.apache.guacamole:guacamole-common: >= 0.9.5, < 0.9.11-incubating → fixed in 0.9.11-incubating

Description

A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of blocks of printed data to overlap. Such overlapping writes could cause packet data to be misread as the packet length, resulting in the remaining data being written beyond the end of a statically-allocated buffer.

Related

Alias · CVE (1)

  • CVE-2017-3158 A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of blocks of printed data… vulnerability

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References