CVE-2013-4282

2013-11-0219:55:04

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.9

Confidence

High

EPSS

0.084

Percentile

94.5%

JSON

Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service (crash) via a long password in a SPICE ticket.

Affected configurations

Nvd

Node

spice_projectspiceMatch0.12.0

Node

redhatenterprise_virtualizationMatch3.0

redhatenterprise_linuxMatch5

redhatenterprise_linuxMatch6.0

VendorProductVersionCPE
spice_projectspice0.12.0cpe:2.3:a:spice_project:spice:0.12.0:*:*:*:*:*:*:*
redhatenterprise_virtualization3.0cpe:2.3:a:redhat:enterprise_virtualization:3.0:*:*:*:*:*:*:*
redhatenterprise_linux5cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*
redhatenterprise_linux6.0cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
spice_project	spice	0.12.0	cpe:2.3:a:spice_project:spice:0.12.0:::::::*
redhat	enterprise_virtualization	3.0	cpe:2.3:a:redhat:enterprise_virtualization:3.0:::::::*
redhat	enterprise_linux	5	cpe:2.3:o:redhat:enterprise_linux:5:::::::*
redhat	enterprise_linux	6.0	cpe:2.3:o:redhat:enterprise_linux:6.0:::::::*