Important: Red Hat Security Advisory: spice-server security update

An update for spice-server is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

EulerOS 2.0 SP3 : spice (EulerOS-SA-2018-1364)

According to the version of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Missing check in demarshal.py:writevalidatearrayitem allows for buffer overflow and denial of service CVE-2018-10873 Note that Tenable Network Securi...

EulerOS 2.0 SP3 : spice-gtk (EulerOS-SA-2018-1363)

According to the version of the spice-gtk packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Missing check in demarshal.py:writevalidatearrayitem allows for buffer overflow and denial of service CVE-2018-10873 Note that Tenable Network...

EulerOS 2.0 SP2 : spice (EulerOS-SA-2018-1356)

According to the version of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Missing check in demarshal.py:writevalidatearrayitem allows for buffer overflow and denial of service CVE-2018-10873 Note that Tenable Network Securi...

EulerOS 2.0 SP2 : spice-gtk (EulerOS-SA-2018-1355)

According to the version of the spice-gtk packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Missing check in demarshal.py:writevalidatearrayitem allows for buffer overflow and denial of service CVE-2018-10873 Note that Tenable Network...

Moderate: Red Hat Security Advisory: Red Hat Virtualization security and bug fix update

An update for imgbased, redhat-release-virtualization-host, and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CV...

spice: Missing check in demarshal.py:write_validate_array_item() allows for buffer overflow and denial of service

A vulnerability was discovered in SPICE where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts...

Ubuntu: Security Advisory (USN-3751-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-3659-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for spice (openSUSE-SU-2018:2598-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for spice-gtk (openSUSE-SU-2018:2730-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Debian DSA-4319-1 : spice - security update

Frediano Ziglio reported a missing check in the script to generate demarshalling code in the SPICE protocol client and server library. The generated demarshalling code is prone to multiple buffer overflows. An authenticated attacker can take advantage of this flaw to cause a denial of service spi...

[SECURITY] [DSA 4319-1] spice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4319-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 15, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4319-1] spice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4319-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 15, 2018 https://www.debian.org/security/faq -...

DSA-4319-1 spice - security update

Bulletin has no description...

Debian: Security Advisory (DSA-4319-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for spice-server CESA-2018:2731 centos7

Check the version of spice-server SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882950";...

CentOS Update for spice-server CESA-2018:2732 centos6

Check the version of spice-server SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882948";...

CentOS Update for spice-glib CESA-2018:2731 centos7

Check the version of spice-glib SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882951";...

CentOS Update for spice-glib CESA-2018:2732 centos6

Check the version of spice-glib SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882949";...