Lucene search
UbuntuUSN-1926-1HistoryAug 14, 2013 - 12:00 a.m.
SPICE vulnerability
2013-08-1400:00:00
ubuntu.com
31
6.3 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.021 Low
EPSS
Percentile
88.9%
Releases
- Ubuntu 13.04
Packages
- spice - SPICE protocol client and server library
Details
David Gibson discovered that SPICE incorrectly handled certain network
errors. An attacker could use this issue to cause the SPICE server to
crash, resulting in a denial of service.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 13.04 | noarch | libspice-server1 | < 0.12.2-0nocelt2expubuntu1.1 | UNKNOWN |
| Ubuntu | 13.04 | noarch | libspice-server-dev | < 0.12.2-0nocelt2expubuntu1.1 | UNKNOWN |
| Ubuntu | 13.04 | noarch | spice-client | < 0.12.2-0nocelt2expubuntu1.1 | UNKNOWN |
References
Related
openvas
openvas
CentOS Update for spice-server CESA-2013:1192 centos6
2013-09-06 00:00:00
Ubuntu: Security Advisory (USN-1926-1)
2013-08-16 00:00:00
RedHat Update for spice-server RHSA-2013:1192-01
2013-09-06 00:00:00
mageia
mageia
Updated spice packages fix CVE-2013-4130
2013-08-22 22:08:55
cve
cve
CVE-2013-4130
2013-08-20 22:55:00
prion
prion
Code injection
2013-08-20 22:55:00
nessus
nessus
Scientific Linux Security Update : spice-server on SL6.x x86_64 (20130903)
2013-09-05 00:00:00
CentOS 6 : spice-server (CESA-2013:1192)
2013-09-05 00:00:00
Oracle Linux 6 : spice-server (ELSA-2013-1192)
2013-09-04 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: spice-0.12.4-1.fc18
2013-08-15 02:58:49
[SECURITY] Fedora 19 Update: spice-0.12.4-1.fc19
2013-08-10 19:59:27
ubuntucve
ubuntucve
CVE-2013-4130
2013-07-15 00:00:00
centos
centos
spice security update
2013-09-03 21:44:42
debiancve
debiancve
CVE-2013-4130
2013-08-20 22:55:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:58:05
securityvulns
securityvulns
[ MDVSA-2013:217 ] spice
2013-08-28 00:00:00
SPICE DoS
2013-08-28 00:00:00
oraclelinux
oraclelinux
spice-server security update
2013-09-03 00:00:00
redhat
redhat
(RHSA-2013:1192) Moderate: spice-server security update
2013-09-03 00:00:00
(RHSA-2013:1260) Moderate: rhev-hypervisor6 security and bug fix update
2013-09-23 00:00:00
osv
osv
spice - denial of service
2014-01-08 00:00:00
debian
debian
[SECURITY] [DSA 2839-1] spice security update
2014-01-08 14:41:30
[SECURITY] [DSA 2839-1] spice security update
2014-01-08 14:41:30
6.3 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.021 Low
EPSS
Percentile
88.9%
Related for USN-1926-1