UBUNTU-CVE-2017-3158
- Source
- https://ubuntu.com/security/CVE-2017-3158
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2017/UBUNTU-CVE-2017-3158.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2017-3158
- Upstream
- Published
- 2018-01-18T20:29:00Z
- Modified
- 2025-07-14T07:14:35.694045Z
- Severity
-
- 8.1 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- - medium
- Summary
- [none]
- Details
-
A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of blocks of printed data to overlap. Such overlapping writes could cause packet data to be misread as the packet length, resulting in the remaining data being written beyond the end of a statically-allocated buffer.
- References
Affected packages
Ubuntu:Pro:16.04:LTS / guacamole-client
Package
- Name
- guacamole-client
- Purl
- pkg:deb/ubuntu/guacamole-client@0.8.3-1.2?arch=source&distro=esm-apps/xenial
Ubuntu:Pro:16.04:LTS / guacamole-server
Package
- Name
- guacamole-server
- Purl
- pkg:deb/ubuntu/guacamole-server@0.8.3-2?arch=source&distro=esm-apps/xenial
Ubuntu:Pro:18.04:LTS / guacamole-client
Package
- Name
- guacamole-client
- Purl
- pkg:deb/ubuntu/guacamole-client@0.9.9+dfsg-1?arch=source&distro=esm-apps/bionic
Ubuntu:Pro:18.04:LTS / guacamole-server
Package
- Name
- guacamole-server
- Purl
- pkg:deb/ubuntu/guacamole-server@0.9.9-2build1?arch=source&distro=esm-apps/bionic
Ubuntu:22.04:LTS / guacamole-server
Package
- Name
- guacamole-server
- Purl
- pkg:deb/ubuntu/guacamole-server@1.3.0-1.1?arch=source&distro=jammy