Lucene search

K
amazonAmazonALAS2-2023-1940
HistoryFeb 17, 2023 - 12:10 a.m.

Medium: spice-protocol

2023-02-1700:10:00
alas.aws.amazon.com
13
spice-protocol
integer overflow
buffer overflow
security update
cve-2018-10893
red hat
mitre

0.002 Low

EPSS

Percentile

52.2%

Issue Overview:

Multiple integer overflow and buffer overflow issues were discovered in spice-client’s handling of LZ compressed frames. A malicious server could cause the client to crash or, potentially, execute arbitrary code. (CVE-2018-10893)

Affected Packages:

spice-protocol

Issue Correction:
Run yum update spice-protocol to update your system.

New Packages:

noarch:  
    spice-protocol-0.12.14-1.amzn2.noarch  
  
src:  
    spice-protocol-0.12.14-1.amzn2.src  

Additional References

Red Hat: CVE-2018-10893

Mitre: CVE-2018-10893