High severity8.1NVD Advisory· Published Jan 18, 2018· Updated Jun 17, 2026
CVE-2017-3158
CVE-2017-3158
Description
A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of blocks of printed data to overlap. Such overlapping writes could cause packet data to be misread as the packet length, resulting in the remaining data being written beyond the end of a statically-allocated buffer.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.apache.guacamole:guacamole-commonMaven | >= 0.9.5, < 0.9.11-incubating | 0.9.11-incubating |
Affected products
2- Range: Apache Guacamole 0.9.5 to 0.9.10-incubating
Patches
Vulnerability mechanics
References
4- github.com/advisories/GHSA-3vv3-585q-wv6xghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2017-3158ghsaADVISORY
- lists.apache.org/thread.html/b218d36bfdaf655d27382daec4dcd02ec717631f4aee8b7e4300ad65@%3Cuser.guacamole.apache.org%3EghsaWEB
- lists.apache.org/thread.html/b218d36bfdaf655d27382daec4dcd02ec717631f4aee8b7e4300ad65%40%3Cuser.guacamole.apache.org%3Envd
News mentions
0No linked articles in our index yet.