CVE-2010-0429

CVE-2010-0429 concerns the libspice component of QEMU-KVM used by Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0. The vulnerability arises from not properly restricting addresses for memory-management actions, allowing a privileged guest user to cause a guest crash (denial of servi...

CVE-2010-0428

The CVE-2010-0428 issue affects the libspice component of QEMU-KVM used by the host in Red Hat Enterprise Virtualization Hypervisor (rhev-hypervisor) and qspice 0.3.0. It stems from inadequate validation of guest QXL driver pointers, which can allow a privileged guest user to crash the host (deni...