CVE-2020-9497
02.07.2020, 13:15
Apache Guacamole 1.1.0 and older do not properly validate datareceived from RDP servers via static virtual channels. If a userconnects to a malicious or compromised RDP server, specially-craftedPDUs could result in disclosure of information within the memory ofthe guacd process handling the connection.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apache | guacamole | 𝑥 ≤ 1.1.0 |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References