Skip to content
CVE Tracker
Back

CVE-2017-3158

A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of blocks of printed data…

High8.1EPSS 1.2%
Published
Updated
Reserved
Assigned by
apache

Description

A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of blocks of printed data to overlap. Such overlapping writes could cause packet data to be misread as the packet length, resulting in the remaining data being written beyond the end of a statically-allocated buffer.

Scores

CVSS scores of CVE-2017-3158, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.0High8.1CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
1.2% · top 31% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.1.

Weakness

Affected products

  • Apache Software Foundation · Apache Guacamole

    • affected Apache Guacamole 0.9.5 to 0.9.10-incubating

Affected packages

From reviewed advisories of the GitHub Advisory Database.

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .