SUSE SLES15 Security Update : spice-vdagent (SUSE-SU-2026:3470-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3470-1 advisory. - CVE-2026-57965: integer overflow in udscswrite can lead to heap buffer overflow bsc1269553. - CVE-2026-57966: improper sanitizati...

SUSE-SU-2026:3485-1 Security update for spice-vdagent

This update for spice-vdagent fixes the following issues: - CVE-2026-57965: integer overflow in udscswrite can lead to heap buffer overflow bsc1269553. - CVE-2026-57966: improper sanitization allows a compromised SPICE host to write arbitrary files to any location on the guest operating system...

CVE-2026-57965 Spice-vdagent: integer overflow in udscs_write() leading to heap buffer overflow

A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This vulnerability can lead to a heap buffer overflow, causing the spice-vdagent daemon to crash and resulting in a Denial of Service DoS for the virtua...

CVE-2026-57965 Spice-vdagent: integer overflow in udscs_write() leading to heap buffer overflow

A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This vulnerability can lead to a heap buffer overflow, causing the spice-vdagent daemon to crash and resulting in a Denial of Service DoS for the virtua...