EulerOS 2.0 SP5 : spice-gtk (EulerOS-SA-2019-1013)

According to the version of the spice-gtk packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Missing check in demarshal.py:writevalidatearrayitem allows for buffer overflow and denial of service CVE-2018-10873 Note that Tenable Network...

SUSE SLES15 Security Update : spice (SUSE-SU-2018:2566-1)

This update for spice fixes the following issues : Security issues fixed : CVE-2018-10873: Fix potential heap corruption when demarshalling bsc1104448 CVE-2018-10893: Avoid buffer overflow on image lz checks bsc1101295 Note that Tenable Network Security has extracted the preceding description blo...

SUSE SLED15 / SLES15 Security Update : spice-gtk (SUSE-SU-2018:2709-1)

This update for spice-gtk fixes the following issues : Security issues fixed : CVE-2018-10873: Fix potential heap corruption when demarshalling bsc1104448 CVE-2018-10893: Avoid buffer overflow on image lz checks bsc1101295 Other bugs fixed: Add setuid bit to spice-client-glib-usb-acl-helper...

Security Bulletin: A vulnerability in SPICE affects PowerKVM

Summary PowerKVM is affected by a vulnerability in SPICE. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-10873 DESCRIPTION: SPICE is vulnerable to a denial of service, caused by a missing check in pythonmodules/demarshal.py:writevalidatearrayitem. By sending a...

Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-s, 1801-t and 1801-u

Summary AT&T has released versions 1801-s, 1801-t and 1801-u for the Vyatta 5600. Details of this release can be found at https://console.bluemix.net/docs/infrastructure/virtual-router-appliance/vyatta-5600-security-fixes.htmlat-t-vyatta-5600-vrouter-software-patches Vulnerability Details CVEID:...

GLSA-201811-20 : spice-gtk: Remote code execution

The remote host is affected by the vulnerability described in GLSA-201811-20 spice-gtk: Remote code execution A vulnerability was found in spice-gtk client due to the incorrect use of integer types and missing overflow checks. Impact : An attacker, by enticing the user to join a malicious server,...

spice-gtk: Remote code execution

Background spice-gtk is a set of GObject and Gtk objects for connecting to Spice servers and a client GUI. Description A vulnerability was found in spice-gtk client due to the incorrect use of integer types and missing overflow checks. Impact An attacker, by enticing the user to join a malicious...

Virtuozzo 6 : spice-server / spice-server-devel (VZLSA-2018-3522)

An update for spice-server is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

CentOS Update for spice-server CESA-2018:3522 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 6 : spice-server (CESA-2018:3522)

An update for spice-server is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

spice security update

CentOS Errata and Security Advisory CESA-2018:3522 An update for spice-server is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Oracle Linux 6 : spice-server (ELSA-2018-3522)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-3522 advisory. - Prevent potential buffer/integer overflows with invalid MonitorsConfig messages sent from an authenticated client Resolves: CVE-2017-7506 Tenable has extracte...

Scientific Linux Security Update : spice-server on SL6.x x86_64 (20181108)

Security Fixes : - spice: Possible buffer overflow via invalid monitor configurations CVE-2017-7506 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid118853; scriptversion"1.5";...

spice-server security update

0.12.4-16.2 - Prevent potential buffer/integer overflows with invalid MonitorsConfig messages sent from an authenticated client Resolves: CVE-2017-7506 0.12.4-16.1 - Fix flexible array buffer overflow Resolves: rhbz1596008...

RHEL 6 : spice-server (RHSA-2018:3522)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:3522 advisory. The Simple Protocol for Independent Computing Environments SPICE is a remote display protocol for virtual environments. SPICE users can access a...

spice: Possible buffer overflow via invalid monitor configurations

A vulnerability was discovered in spice server's protocol handling. An authenticated attacker could send specially crafted messages to the spice server, causing out-of-bounds memory accesses, leading to parts of server memory being leaked or a crash...

Important: Red Hat Security Advisory: spice-server security update

An update for spice-server is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

EulerOS 2.0 SP3 : spice (EulerOS-SA-2018-1364)

According to the version of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Missing check in demarshal.py:writevalidatearrayitem allows for buffer overflow and denial of service CVE-2018-10873 Note that Tenable Network Securi...

EulerOS 2.0 SP3 : spice-gtk (EulerOS-SA-2018-1363)

According to the version of the spice-gtk packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Missing check in demarshal.py:writevalidatearrayitem allows for buffer overflow and denial of service CVE-2018-10873 Note that Tenable Network...

EulerOS 2.0 SP2 : spice-gtk (EulerOS-SA-2018-1355)

According to the version of the spice-gtk packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Missing check in demarshal.py:writevalidatearrayitem allows for buffer overflow and denial of service CVE-2018-10873 Note that Tenable Network...