CVE-2023-30576

    Dashboard / Vulnerabilities / CVE-2023-30576

    CVE-2023-30576

    Published: 7 Jun 2023Last Modified: 12 Aug 2026

    Summary: Apache Guacamole: Use-after-free in handling of RDP audio input buffer

    Details: Apache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer. Depending on timing, this may allow an attacker to execute arbitrary code with the privileges of the guacd process.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/30xxx/CVE-2023-30576.json, https://lists.apache.org/thread/vgtvxb3w7mm84hx6v8dfc0onsoz05gb6, https://nvd.nist.gov/vuln/detail/CVE-2023-30576

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 16757aebecf1e79e1f137d3e8192627fddc0f868
    Fixed -83ca7aa16b49830b5adb5a0ce60082b385163934

    Affected versions

    1.5.1-RC1
    1.5.1
    1.5.0-RC1
    1.5.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-30576 | CVE-DB