{"id":"CVE-2017-3158","state":"PUBLISHED","title":"A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of blocks of printed data to overlap. Such overlapping writes could","description":"A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of blocks of printed data to overlap. Such overlapping writes could cause packet data to be misread as the packet length, resulting in the remaining data being written beyond the end of a statically-allocated buffer.","publishedAt":"2018-01-18T20:00:00.000Z","updatedAt":"2024-09-16T16:37:33.486Z","severity":null,"assigner":"apache","products":["Apache Software Foundation Apache Guacamole"],"affected":[{"vendor":"Apache Software Foundation","product":"Apache Guacamole","versions":[{"version":"Apache Guacamole 0.9.5 to 0.9.10-incubating","status":"affected"}]}],"references":["https://lists.apache.org/thread.html/b218d36bfdaf655d27382daec4dcd02ec717631f4aee8b7e4300ad65%40%3Cuser.guacamole.apache.org%3E"],"weaknesses":[],"ingestedAt":"2026-10-29T19:43:42.704Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2017/3xxx/CVE-2017-3158.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2017-3158","state":"PUBLISHED","datePublished":"2018-01-18T20:00:00.000Z","dateUpdated":"2024-09-16T16:37:33.486Z","assignerShortName":"apache","assignerOrgId":"f0158376-9dc2-43b6-827c-5f631a4d8d09","dateReserved":"2016-12-05T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of blocks of printed data to overlap. Such overlapping writes could cause packet data to be misread as the packet length, resulting in the remaining data being written beyond the end of a statically-allocated buffer."}],"affected":[{"vendor":"Apache Software Foundation","product":"Apache Guacamole","versions":[{"version":"Apache Guacamole 0.9.5 to 0.9.10-incubating","status":"affected"}]}],"references":[{"url":"https://lists.apache.org/thread.html/b218d36bfdaf655d27382daec4dcd02ec717631f4aee8b7e4300ad65%40%3Cuser.guacamole.apache.org%3E","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"Buffer Overflow","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"apache","dateUpdated":"2018-01-18T19:57:01.000Z","orgId":"f0158376-9dc2-43b6-827c-5f631a4d8d09"},"datePublic":"2018-01-15T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@apache.org","DATE_PUBLIC":"2018-01-15T00:00:00","ID":"CVE-2017-3158","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Apache Guacamole","version":{"version_data":[{"version_value":"Apache Guacamole 0.9.5 to 0.9.10-incubating"}]}}]},"vendor_name":"Apache Software Foundation"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of blocks of printed data to overlap. Such overlapping writes could cause packet data to be misread as the packet length, resulting in the remaining data being written beyond the end of a statically-allocated buffer."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Buffer Overflow"}]}]},"references":{"reference_data":[{"name":"https://lists.apache.org/thread.html/b218d36bfdaf655d27382daec4dcd02ec717631f4aee8b7e4300ad65@%3Cuser.guacamole.apache.org%3E","refsource":"MISC","url":"https://lists.apache.org/thread.html/b218d36bfdaf655d27382daec4dcd02ec717631f4aee8b7e4300ad65@%3Cuser.guacamole.apache.org%3E"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://lists.apache.org/thread.html/b218d36bfdaf655d27382daec4dcd02ec717631f4aee8b7e4300ad65%40%3Cuser.guacamole.apache.org%3E","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T14:16:28.246Z"}}]}}}