1802 matches found
CentOS 8 : spice and spice-gtk (CESA-2020:4186)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4186 advisory. - spice: multiple buffer overflow vulnerabilities in QUIC decoding code CVE-2020-14355 Note that Nessus has not tested for this issue but has instead relied onl...
CentOS 8 : virt:rhel (CESA-2019:3345)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3345 advisory. - QEMU: qxl: null pointer dereference while releasing spice resources CVE-2019-12155 - ntfs-3g: heap-based buffer overflow leads to local root privileg...
CVE-2021-20201
A flaw was found in spice. A DoS tool might make it easier for remote attackers to cause a denial of service CPU consumption by performing many renegotiations within a single connection...
EulerOS 2.0 SP3 : spice-gtk (EulerOS-SA-2021-1122)
According to the versions of the spice-gtk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way spice-client processed certain messages sent from the server. An attacker, having control of malicious...
EulerOS 2.0 SP3 : spice (EulerOS-SA-2021-1121)
According to the version of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Bot...
Huawei EulerOS: Security Advisory for spice (EulerOS-SA-2021-1121)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for spice-gtk (EulerOS-SA-2021-1122)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-2524-1 : spice-vdagent security update
Several vulnerabilities were discovered in spice-vdagent, a spice guest agent for enchancing SPICE integeration and experience. CVE-2017-15108 spice-vdagent does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to...
Debian: Security Advisory (DLA-2524-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2524-1] spice-vdagent security update
Debian LTS Advisory DLA-2524-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA January 13, 2021 https://wiki.debian.org/LTS Package : spice-vdagent Version : 0.17.0-1+deb9u1 CVE ID : CVE-2017-15108 CVE-2020-25650 CVE-2020-25651 CVE-2020-25652 CVE-2020-25653 Debian Bug...
DLA-2524-1 spice-vdagent - security update
Bulletin has no description...
Huawei EulerOS: Security Advisory for spice (EulerOS-SA-2021-1052)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated spice-vdagent package fixes security vulnerabilities
Matthias Gerstner discovered that SPICE vdagent incorrectly handled the activexfers hash table. A local attacker could possibly use this issue to cause SPICE vdagent to consume memory, resulting in a denial of service CVE-2020-25650. Matthias Gerstner discovered that SPICE vdagent incorrectly...
MGASA-2020-0474 Updated spice-vdagent package fixes security vulnerabilities
Matthias Gerstner discovered that SPICE vdagent incorrectly handled the activexfers hash table. A local attacker could possibly use this issue to cause SPICE vdagent to consume memory, resulting in a denial of service CVE-2020-25650. Matthias Gerstner discovered that SPICE vdagent incorrectly...
Virtuozzo 6 : spice-server / spice-server-devel (VZLSA-2019-0232)
An update for spice-server is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
SUSE SLES12 Security Update : spice-gtk (SUSE-SU-2020:3841-1)
This update for spice-gtk fixes the following issues : CVE-2018-10873: Fixed a potential heap corruption when demarshalling bsc1104448 CVE-2018-10893: Fixed a buffer overflow on image lz checks bsc1101295 Note that Tenable Network Security has extracted the preceding description block directly fr...
SUSE SLES12 Security Update : spice (SUSE-SU-2020:3842-1)
This update for spice fixes the following issues : CVE-2018-10873: Fixed a potential heap corruption when demarshalling bsc1104448 CVE-2018-10893: Fixed a buffer overflow on image lz checks bsc1101295 Note that Tenable Network Security has extracted the preceding description block directly from t...
SUSE-SU-2020:3842-1 Security update for spice
This update for spice fixes the following issues: - CVE-2018-10873: Fixed a potential heap corruption when demarshalling bsc1104448 - CVE-2018-10893: Fixed a buffer overflow on image lz checks bsc1101295...
SUSE-SU-2020:3841-1 Security update for spice-gtk
This update for spice-gtk fixes the following issues: - CVE-2018-10873: Fixed a potential heap corruption when demarshalling bsc1104448 - CVE-2018-10893: Fixed a buffer overflow on image lz checks bsc1101295...
