CVE-2019-8272

UltraVNC 1211 contains off-by-one vulnerabilities in the VNC server code that can potentially lead to remote code execution when exploited over a network. The issue is fixed in revision 1212. A Nessus plugin also documents other related UltraVNC CVEs (e.g., 2019-8274, 2019-8271) affecting version...

CVE-2019-8268

UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of ClientConnection::ReadString function, which can potentially result code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been...

Design/Logic Flaw

UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212...

CVE-2019-8272

UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212...

Code injection

UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of ClientConnection::ReadString function, which can potentially result code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been...

CVE-2019-8268

UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of ClientConnection::ReadString function, which can potentially result code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been...

CVE-2019-8272

UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212...

EulerOS 2.0 SP5 : spice (EulerOS-SA-2019-1075)

According to the version of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - spice: Off-by-one error in array access in spice/server/memslot.c CVE-2019-3813 Note that Tenable Network Security has extracted the preceding...

The vulnerability of the read_header function in the libarchive library, which allows a hacker to gain unauthorized access to information

The vulnerability of the readheader function in the libarchive library is related to reading beyond the allowed boundaries due to an off-by-one error in the names of RAR archives in UTF-16 format. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to sensitive...

spice: Off-by-one error in array access in spice/server/memslot.c

Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslotgetvirt. This may lead to a denial of service, or, in the worst case, code-execution by unauthenticated attackers...

CentOS 7 : spice (CESA-2019:0231)

An update for spice is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

spice security update

CentOS Errata and Security Advisory CESA-2019:0231 An update for spice is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

SUSE SLED12 / SLES12 Security Update : libunwind (SUSE-SU-2019:0284-1)

This update for libunwind fixes the following issues : Security issues fixed : CVE-2015-3239: Fixed a off-by-one in the dwarftounwregnum function bsc936786 Non-security issues fixed: Fixed a dependency issue with libzmq5 bsc1122012 Fixed build on armv7 bsc976955 Note that Tenable Network Security...

ALPINE-CVE-2019-3813

Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslotgetvirt. This may lead to a denial of service, or, in the worst case, code-execution by unauthenticated attackers...

Oracle Linux 7 : spice (ELSA-2019-0231)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-0231 advisory. 0.14.0-6.0.2.1 - Add ARM support 0.14.0-6.1 - Fix off-by-one error during guest-to-host memory address conversion Resolves: CVE-2019-3813 Tenable has extracted...

Scientific Linux Security Update : spice on SL7.x x86_64 (20190131)

Security Fixes : - spice: Off-by-one error in array access in spice/server/memslot.c CVE-2019-3813 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid121534; scriptversion"1.5";...

RHEL 7 : spice (RHSA-2019:0231)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0231 advisory. The Simple Protocol for Independent Computing Environments SPICE is a remote display system built for virtual environments which allows the user to...

RHEL 6 : spice-server (RHSA-2019:0232)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0232 advisory. The Simple Protocol for Independent Computing Environments SPICE is a remote display protocol for virtual environments. SPICE users can access a...

Scientific Linux Security Update : spice-server on SL6.x x86_64 (20190131)

Security Fixes : - spice: Off-by-one error in array access in spice/server/memslot.c CVE-2019-3813 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid121535; scriptversion"1.5";...

spice: Off-by-one error in array access in spice/server/memslot.c

Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslotgetvirt. This may lead to a denial of service, or, in the worst case, code-execution by unauthenticated attackers...