CVE-2017-15108

spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to inject arbitrary commands to be executed...

Code injection

spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to inject arbitrary commands to be executed...

CVE-2017-15108

spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to inject arbitrary commands to be executed...

CVE-2017-15108

spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to inject arbitrary commands to be executed...

CVE-2017-15108

spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to inject arbitrary commands to be executed...

CVE-2017-15108

CVE-2017-15108 affects spice-vdagent (versions up to 0.17.0). Root cause: improper escaping of the save directory before passing to a shell, enabling a local attacker with access to the agent’s session to inject arbitrary commands. The Debian advisory notes a fix in 0.17.0-1+deb9u1; other open-so...

The vulnerability of the spice library, related to buffer overflows, allows attackers to cause a service failure or execute arbitrary code.

The vulnerability of the spice library is related to buffer overflow exposure of memory contents. Exploiting this vulnerability can allow a remote attacker to cause a service failure or execute arbitrary code using a specially crafted message...

Debian: Security Advisory (DLA-825-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Beers with Talos EP 17: Greek Gods, Trojans, and the Spice Girls as Spirit Animals

Beers with Talos BWT Podcast Episode 17 is now available. Download this episode and subscribe to Beers with Talos:img bo...

openSUSE: Security Advisory for spice (openSUSE-SU-2017:2604-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : spice (openSUSE-2017-1110)

This update for spice fixes the following security issues : - CVE-2017-7506: Fixed an out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak bsc1046779. This update was imported from the...

Security update for spice (important)

This update for spice fixes the following security issues: - CVE-2017-7506: Fixed an out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak bsc1046779. This update was imported from the...

SUSE SLED12 / SLES12 Security Update : spice (SUSE-SU-2017:2552-1)

This update for spice fixes the following security issues : - CVE-2017-7506: Fixed an out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak bsc1046779. Note that Tenable Network Securit...

SUSE-SU-2017:2552-1 Security update for spice

This update for spice fixes the following security issues: - CVE-2017-7506: Fixed an out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak bsc1046779...

EulerOS 2.0 SP2 : spice (EulerOS-SA-2017-1226)

According to the version of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A vulnerability was discovered in spice server's protocol handling. An authenticated attacker could send specially crafted messages to the spice...

CentOS 7 : spice (CESA-2017:2471)

An update for spice is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

spice security update

CentOS Errata and Security Advisory CESA-2017:2471 An update for spice is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

spice: Possible buffer overflow via invalid monitor configurations

A vulnerability was discovered in spice server's protocol handling. An authenticated attacker could send specially crafted messages to the spice server, causing out-of-bounds memory accesses, leading to parts of server memory being leaked or a crash...

Scientific Linux Security Update : spice on SL7.x x86_64 (20170815)

Security Fixes : - A vulnerability was discovered in spice server's protocol handling. An authenticated attacker could send specially crafted messages to the spice server, causing out-of-bounds memory accesses, leading to parts of server memory being leaked or a crash. CVE-2017-7506 This issue wa...

Oracle Linux 7 : spice (ELSA-2017-2471)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2471 advisory. - Redo build properly versioned as a zstream build Related: CVE-2017-7506 Tenable has extracted the preceding description block directly from the Oracle Linux...