Amazon Linux 2 : qemu (ALAS-2019-1248)

A heap buffer overflow issue was found in the loaddevicetree function of QEMU, which is invoked to load a device tree blob at boot time. It occurs due to device tree size manipulation before buffer allocation, which could overflow a signed int type. A user/process could use this flaw to potential...

Security fix for the ALT Linux 9 package SPICE version 0.14.2-alt1

0.14.2-alt1 built June 4, 2019 Alexey Shabalin in task 231442 --- May 31, 2019 Alexey Shabalin - 0.14.2 fixes: CVE-2019-3813 - build with gstreamer support...

Arbitrary Code Execution

The Simple Protocol for Independent Computing Environments SPICE is a remote display protocol for virtual environments. SPICE users can access a virtualized desktop or server from the local system or any system with network access to the server. SPICE is used in Red Hat Enterprise Linux for viewi...

Fedora Update for spice FEDORA-2019-a095a16c47

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Denial Of Service (DoS)

SPICE is vulnerable to denial of service attacks. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to crash due to a glitch in server's protocol handling...

Authorization Bypass

spice-server is vulnerable to authorization bypass. The vulnerability allows local guest OS users to read from or write to arbitrary host memory locations...

Denial Of Service (DoS)

OpenStack Compute nova launches and schedules large networks of virtual machines, creating a redundant and scalable cloud computing platform. Compute provides the software, control panels, and APIs required to orchestrate a cloud, including running virtual machine instances and controlling access...

SUSE-SU-2019:0231-2 Security update for spice

This update for spice fixes the following issues: Security issue fixed: - CVE-2019-3813: Fixed a out-of-bounds read in the memslotgetvirt function that could lead to denial-of-service or code-execution bsc1122706...

EulerOS Virtualization 2.5.4 : spice-gtk (EulerOS-SA-2019-1200)

According to the version of the spice-gtk packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Missing check in demarshal.py:writevalidatearrayitem allows for buffer overflow and denial of service CVE-2018-10873 Note that...

EulerOS Virtualization 2.5.3 : spice-gtk (EulerOS-SA-2019-1170)

According to the version of the spice-gtk packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Missing check in demarshal.py:writevalidatearrayitem allows for buffer overflow and denial of service CVE-2018-10873 Note that...

EulerOS 2.0 SP2 : spice (EulerOS-SA-2019-1127)

According to the version of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - spice: Off-by-one error in array access in spice/server/memslot.c CVE-2019-3813 Note that Tenable Network Security has extracted the preceding...

Amazon Linux 2 : spice (ALAS-2019-1184)

Spice, versions 0.5.2 through 0.14.0, are vulnerable to an out-of-bounds read due to an off-by-one error in memslotgetvirt. This may lead to a denial of service, or, in the worst case, code-execution by unauthenticated attackers.CVE-2019-3813 C Tenable Network Security, Inc. The descriptive text...

The vulnerability of the memslot_get_virt function in the Spice library, which allows a hacker to execute arbitrary code or cause a service denial.

The vulnerability of the memslotgetvirt function in the Spice library exists due to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service failures...

openSUSE Security Update : spice-gtk (openSUSE-2019-693)

This update for spice-gtk fixes the following issues : Security issues fixed : - CVE-2018-10873: Fix potential heap corruption when demarshalling bsc1104448 - CVE-2018-10893: Avoid buffer overflow on image lz checks bsc1101295 Other bugs fixed : - Add setuid bit to spice-client-glib-usb-acl-helpe...

openSUSE Security Update : spice (openSUSE-2019-660)

This update for spice fixes the following issues : Security issues fixed : - CVE-2018-10873: Fix potential heap corruption when demarshalling bsc1104448 - CVE-2018-10893: Avoid buffer overflow on image lz checks bsc1101295 This update was imported from the SUSE:SLE-15:Update update project...

EulerOS 2.0 SP3 : spice (EulerOS-SA-2019-1105)

According to the version of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - spice: Off-by-one error in array access in spice/server/memslot.c CVE-2019-3813 Note that Tenable Network Security has extracted the preceding...

Important: spice

Issue Overview: Spice, versions 0.5.2 through 0.14.0, are vulnerable to an out-of-bounds read due to an off-by-one error in memslotgetvirt. This may lead to a denial of service, or, in the worst case, code-execution by unauthenticated attackers.CVE-2019-3813 Affected Packages: spice Note: This...

The vulnerability of the memslot_get_virt function in the rendering system for deleted virtual workstations in SPICE allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the memslotgetvirt function in the SPICE rendering system’s “deleted virtual working area” component is related to the possibility of reading values beyond the allowed range due to an off-by-one error. Exploiting this vulnerability can allow a remote attacker to cause service...

Security fix for the ALT Linux 8 package SPICE version 0.14.1-alt1

0.14.1-alt1 built March 11, 2019 Andrey Cherepanov in task 217681 Aug. 31, 2018 Alexey Shabalin - 0.14.1 Fixes: CVE-2018-10873...

EulerOS 2.0 SP5 : spice (EulerOS-SA-2019-1075)

According to the version of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - spice: Off-by-one error in array access in spice/server/memslot.c CVE-2019-3813 Note that Tenable Network Security has extracted the preceding...