CVE-2012-4415: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 13.6% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the guac_client_plugin_open function in libguac in Guacamole before 0.6.3 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long protocol name.

Affected products

• Fedoraproject Fedora: version 16 only; version 17 only
• Guac-Dev Guacamole: up to and including 0.6.2; version 0.5.0 only; version 0.6.0 only

Published 2012-10-01. Last modified 2026-06-16.