Lucene search

K
mageiaGentoo FoundationMGASA-2017-0062
HistoryFeb 23, 2017 - 5:58 p.m.

Updated spice packages fix security vulnerability

2017-02-2317:58:52
Gentoo Foundation
advisories.mageia.org
7

0.023 Low

EPSS

Percentile

89.6%

An authenticated attacker could send crafted messages to the spice server causing a heap overflow leading to a crash or possible code execution. (CVE-2016-9577) An attacker able to connect to the spice server could send crafted messages which would cause the process to crash. (CVE-2016-9578)

OSVersionArchitecturePackageVersionFilename
Mageia5noarchspice< 0.12.5-2.4spice-0.12.5-2.4.mga5