Vulnerability Description
A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of blocks of printed data to overlap. Such overlapping writes could cause packet data to be misread as the packet length, resulting in the remaining data being written beyond the end of a statically-allocated buffer.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache | Guacamole | <= 0.9.9 |
Related Weaknesses (CWE)
References
- https://lists.apache.org/thread.html/b218d36bfdaf655d27382daec4dcd02ec717631f4ae
- https://lists.apache.org/thread.html/b218d36bfdaf655d27382daec4dcd02ec717631f4ae
FAQ
What is CVE-2017-3158?
CVE-2017-3158 is a vulnerability with a CVSS score of 8.1 (HIGH). A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of blocks of printed data to overlap. Such overlapping writes could cause packet data t...
How severe is CVE-2017-3158?
CVE-2017-3158 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-3158?
Check the references section above for vendor advisories and patch information. Affected products include: Apache Guacamole.