Medium: spice-vdagent

Issue Overview: A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This vulnerability can lead to a heap buffer overflow, causing the spice-vdagent daemon to crash and resulting in a Denial of Service Do...

Security update for spice-vdagent

This update for spice-vdagent fixes the following issues: Security fixes: CVE-2026-57965: integer overflow in udscswrite can lead to heap buffer overflow bsc1269553. CVE-2026-57966: improper sanitization allows a compromised SPICE host to write arbitrary files to any location on the guest operati...

SUSE-SU-2026:3585-1 Security update for spice-vdagent

This update for spice-vdagent fixes the following issues: Security fixes: - CVE-2026-57965: integer overflow in udscswrite can lead to heap buffer overflow bsc1269553. - CVE-2026-57966: improper sanitization allows a compromised SPICE host to write arbitrary files to any location on the guest...

Security update for spice-vdagent

This update for spice-vdagent fixes the following issues: CVE-2026-57965: integer overflow in udscswrite can lead to heap buffer overflow bsc1269553. CVE-2026-57966: improper sanitization allows a compromised SPICE host to write arbitrary files to any location on the guest operating system...

OESA-2026-3190 spice-vdagent security update

is an optional component for enhancing user experience and performing guest-oriented management tasks. Its features includes: client mouse mode no need to grab mouse by client, no mouse lag, automatic adjustment of screen resolution, copy and paste text and image between client and domU. It also...

SUSE-SU-2026:23109-1 Security update for spice-vdagent

This update for spice-vdagent fixes the following issues: - CVE-2026-57965: integer overflow in udscswrite allows a compromised SPICE host to crash the spice-vdagent daemon via a specially crafted message that triggers a heap buffer overflow bsc1269553. - CVE-2026-57966: improper sanitization...

[SECURITY] [DLA 4698-1] spice-vdagent security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4698-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA July 24, 2026 https://wiki.debian.org/LTS -...

PT-2026-55688

3 CVEs in spice-vdagent macOS/BSD, session info create returns NULL without systemd-logind... so auth just gets skipped entirely. Any local process connects as trusted agent. The "if auth fails, don't auth" classic 😂 + heap overflow via integer wraparound + path traversal: malicious host writes...

DEBIAN-CVE-2026-57965

A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This vulnerability can lead to a heap buffer overflow, causing the spice-vdagent daemon to crash and resulting in a Denial of Service DoS for the virtua...

CVE-2026-57965

A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This vulnerability can lead to a heap buffer overflow, causing the spice-vdagent daemon to crash and resulting in a Denial of Service DoS for the virtua...