CVE catalog

CVE-2023-30576

UBUNTU-CVE-2023-30576

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.11% · Oct 25, 2026

Apache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer. Depending on timing, this may allow an attacker to execute arbitrary code with the privileges of the guacd process.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntuguacamole-client16.040.8.3-1.1vulnerable
Ubuntuguacamole-client16.040.8.3-1.2vulnerable
Ubuntuguacamole-client18.040.9.9+dfsg-1vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References