Lucene search
RootSSV:61067HistoryOct 31, 2013 - 12:00 a.m.
SPICE 'reds_handle_ticket()'函数远程拒绝服务漏洞
2013-10-3100:00:00
Root
www.seebug.org
21
0.072 Low
EPSS
Percentile
93.3%
BUGTRAQ ID: 63408
CVE(CAN) ID: CVE-2013-4282
SPICE是开源虚拟桌面解决方案。
SPICE的reds_handle_ticket()函数对’password’缓冲区内的解密密码使用了大小固定的尺寸SPICE_MAX_PASSWORD_LENGTH，存在栈缓冲区溢出漏洞，攻击者在建立了到客户端的SPICE连接后，可利用此漏洞造成客户端崩溃。
0
freedesktop spice 0.12.4-0nocelt1.1
freedesktop spice 0.11.0-1
厂商补丁：
freedesktop
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
Related
suse
suse
Security update for spice (important)
2015-05-15 18:04:56
Security update for spice (important)
2015-05-16 01:04:53
securityvulns
securityvulns
SPICE library buffer overflow
2013-11-18 00:00:00
[USN-2027-1] SPICE vulnerability
2013-11-18 00:00:00
oraclelinux
oraclelinux
spice-server security update
2013-10-29 00:00:00
qspice security update
2013-10-29 00:00:00
nessus
nessus
Oracle Linux 5 : qspice (ELSA-2013-1474)
2013-10-30 00:00:00
Fedora 19 : spice-0.12.4-3.fc19 (2013-20340)
2013-11-08 00:00:00
SUSE SLED12 / SLES12 Security Update : spice (SUSE-SU-2015:0884-1)
2015-05-20 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: spice-0.12.4-3.fc20
2013-11-10 06:59:01
[SECURITY] Fedora 18 Update: spice-0.12.4-3.fc18
2013-11-08 04:37:11
[SECURITY] Fedora 19 Update: spice-0.12.4-3.fc19
2013-11-08 04:35:57
openvas
openvas
Fedora Update for spice FEDORA-2013-20360
2013-11-08 00:00:00
RedHat Update for qspice RHSA-2013:1474-01
2013-11-08 00:00:00
RedHat Update for spice-server RHSA-2013:1473-01
2013-11-08 00:00:00
ubuntu
ubuntu
SPICE vulnerability
2013-11-12 00:00:00
ubuntucve
ubuntucve
CVE-2013-4282
2013-11-02 00:00:00
prion
prion
Stack overflow
2013-11-02 19:55:00
centos
centos
spice security update
2013-10-30 02:12:05
qspice security update
2013-10-29 20:25:52
debiancve
debiancve
CVE-2013-4282
2013-11-02 19:55:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:01:01
redhat
redhat
(RHSA-2013:1474) Important: qspice security update
2013-10-29 00:00:00
(RHSA-2013:1473) Important: spice-server security update
2013-10-29 00:00:00
(RHSA-2013:1460) Important: rhev-hypervisor6 security and bug fix update
2013-10-29 00:00:00
cve
cve
CVE-2013-4282
2013-11-02 19:55:00
mageia
mageia
Updated spice packages fix a security vulnerability
2014-01-21 20:20:58
debian
debian
[SECURITY] [DSA 2839-1] spice security update
2014-01-08 14:41:30
[SECURITY] [DSA 2839-1] spice security update
2014-01-08 14:41:30
osv
osv
spice - denial of service
2014-01-08 00:00:00