Stack overflow

Stack-based buffer overflow in the redshandleticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service crash via a long password in a SPICE ticket...

CVE-2013-4282

Stack-based buffer overflow in the redshandleticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service crash via a long password in a SPICE ticket...

CVE-2013-4282

Stack-based buffer overflow in the redshandleticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service crash via a long password in a SPICE ticket...

CVE-2013-4282

CVE-2013-4282 – SPICE stack overflow vulnerability Affected: SPICE server components (SPICE 0.12.0 and related packages) where the reds_handle_ticket function in server/reds.c processes SPICE tickets.Root cause: stack-based buffer overflow triggered by a long password in a SPICE ticket.Impact: re...

UBUNTU-CVE-2013-4282

Stack-based buffer overflow in the redshandleticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service crash via a long password in a SPICE ticket...

CVE-2013-4282

Stack-based buffer overflow in the redshandleticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service crash via a long password in a SPICE ticket...

SPICE 'reds_handle_ticket()'函数远程拒绝服务漏洞

BUGTRAQ ID: 63408 CVECAN ID: CVE-2013-4282 SPICE是开源虚拟桌面解决方案。 SPICE的redshandleticket函数对'password'缓冲区内的解密密码使用了大小固定的尺寸SPICEMAXPASSWORDLENGTH，存在栈缓冲区溢出漏洞，攻击者在建立了到客户端的SPICE连接后，可利用此漏洞造成客户端崩溃。 0 freedesktop spice 0.12.4-0nocelt1.1 freedesktop spice 0.11.0-1 厂商补丁： freedesktop -----------...

Scientific Linux Security Update : qspice on SL5.x x86_64 (20131029)

A stack-based buffer overflow flaw was found in the way the redshandleticket function in the spice-server library handled decryption of ticket data provided by the client. A remote user able to initiate a SPICE connection to an application acting as a SPICE server could use this flaw to crash the...

Scientific Linux Security Update : spice-server on SL6.x x86_64 (20131029)

A stack-based buffer overflow flaw was found in the way the redshandleticket function in the spice-server library handled decryption of ticket data provided by the client. A remote user able to initiate a SPICE connection to an application acting as a SPICE server could use this flaw to crash the...

spice security update

CentOS Errata and Security Advisory CESA-2013:1473 An updated spice-server package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVS...

RHEL 6 : spice-server (RHSA-2013:1473)

An updated spice-server package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

CentOS 5 : qspice (CESA-2013:1474)

Updated qspice packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CentOS 6 : spice-server (CESA-2013:1473)

An updated spice-server package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

Oracle Linux 6 : spice-server (ELSA-2013-1473)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1473 advisory. - Fix issue with error-handling of RSAprivatedecrypt in previous patch Related: CVE-2013-4282 Tenable has extracted the preceding description block directly fro...

Oracle Linux 5 : qspice (ELSA-2013-1474)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1474 advisory. - Fix spice-server crash when client sends a password which is too long Resolves: CVE-2013-4282 Tenable has extracted the preceding description block directly...

RHEL 5 : qspice (RHSA-2013:1474)

Updated qspice packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

qspice security update

CentOS Errata and Security Advisory CESA-2013:1474 Updated qspice packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base...

spice: stack buffer overflow in reds_handle_ticket() function

Stack-based buffer overflow in the redshandleticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service crash via a long password in a SPICE ticket...

Important: Red Hat Security Advisory: spice-server security update

An updated spice-server package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

spice: stack buffer overflow in reds_handle_ticket() function

Stack-based buffer overflow in the redshandleticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service crash via a long password in a SPICE ticket...