Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <3c67e57c-ef6d-4d0f-8095-6a59b1078bf5@apache.org>
Date: Tue, 19 Dec 2023 11:03:09 -0800
From: Michael Jumper <mjumper@...che.org>
To: oss-security@...ts.openwall.com
Subject: [SECURITY] CVE-2023-43826: Apache Guacamole: Integer overflow in
 handling of VNC image buffers

Severity: important
Base CVSS Score: 7.5 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)

Affected versions:

- Apache Guacamole through 1.5.3

Description:

Apache Guacamole 1.5.3 and older do not consistently ensure that values 
received from a VNC server will not result in integer overflow. If a 
user connects to a malicious or compromised VNC server, specially 
crafted data could result in memory corruption, possibly allowing 
arbitrary code to be executed with the privileges of the running guacd 
process.

Users are recommended to upgrade to version 1.5.4, which fixes this issue.

Credit:

We would like to thank Joseph Surin and Matt Jones (Elttam) for 
reporting this issue.

References:

https://guacamole.apache.org/
https://www.cve.org/CVERecord?id=CVE-2023-43826

Timeline:

2023-09-22: Reported to security@...camole.apache.org
2023-09-22: Report acknowledged by project
2023-09-22: Report confirmed by project
2023-10-26: Fix completed and merged
2023-10-27: Fix tested and confirmed by reporter
2023-12-08: Fix released

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.