MiracleLinux 3 : qspice-0.3.0-54.AXS3.2 (AXSA:2010-422:03)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2010-422:03 advisory. The Simple Protocol for Independent Computing Environments SPICE is a remote display system built for virtual environments which allows you to view a...

Oracle Linux 5 : qspice (ELSA-2010-0633)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0633 advisory. 0.3.0-54.el55.2 - Fix unsafe accesses + spice: drop libpng from windows components 537849 + libspice: fix unsafe guest data accessing Resolves: 568719 ...

RHEL 5 : qspice (RHSA-2010:0633)

Updated qspice packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Scientific Linux Security Update : qspice on SL5.x x86_64

It was found that the libspice component of QEMU-KVM on the host did not validate all pointers provided from a guest system's QXL graphics card driver. A privileged guest user could use this flaw to cause the host to dereference an invalid pointer, causing the guest to crash denial of service or,...

CentOS 5 : qspice (CESA-2010:0633)

Updated qspice packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CVE-2010-0429

CVE-2010-0429 concerns the libspice component of QEMU-KVM used by Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0. The vulnerability arises from not properly restricting addresses for memory-management actions, allowing a privileged guest user to cause a guest crash (denial of servi...