SUSE CVE-2019-3813

Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslotgetvirt. This may lead to a denial of service, or, in the worst case, code-execution by unauthenticated attackers...

NewStart CGSL MAIN 4.06 : spice-server Vulnerability (NS-SA-2019-0092)

The remote NewStart CGSL host, running version MAIN 4.06, has spice-server packages installed that are affected by a vulnerability: - Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslotgetvirt. This may lead to a denial of service, o...

The vulnerability of the memslot_get_virt function in the Spice library, which allows a hacker to execute arbitrary code or cause a service denial.

The vulnerability of the memslotgetvirt function in the Spice library exists due to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service failures...

The vulnerability of the memslot_get_virt function in the rendering system for deleted virtual workstations in SPICE allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the memslotgetvirt function in the SPICE rendering system’s “deleted virtual working area” component is related to the possibility of reading values beyond the allowed range due to an off-by-one error. Exploiting this vulnerability can allow a remote attacker to cause service...

Denial Of Service (DoS)

libspice.so is vulnerable to denial of service. The vulnerability is possible because the function memslotgetvirt lacks the proper boundary checking for slotid array in memslot.c, which is calculated using a QXLPHYSICAL address set by the guest QXL driver, thereby allowing an attacker to input...

SUSE SLES15 Security Update : spice (SUSE-SU-2019:0242-1)

This update for spice fixes the following issues : Security issue fixed : CVE-2019-3813: Fixed a out-of-bounds read in the memslotgetvirt function that could lead to denial-of-service or code-execution bsc1122706. Non-security issue fixed: Include spice-server tweak to compensate for performance...

SUSE SLES12 Security Update : spice (SUSE-SU-2019:0231-1)

This update for spice fixes the following issues : Security issue fixed : CVE-2019-3813: Fixed a out-of-bounds read in the memslotgetvirt function that could lead to denial-of-service or code-execution bsc1122706. Note that Tenable Network Security has extracted the preceding description block...