Lucene search
Veracode Vulnerability DatabaseVERACODE:13133HistoryJan 15, 2019 - 9:26 a.m.
Denial Of Service (DoS)
2019-01-1509:26:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.003 Low
EPSS
Percentile
68.9%
spice is vulnerable to denial of service. An authenticated attacker is able to crash the application via invalid monitor configurations. This is due to an out-of-bounds memory access when processing malicious messages.
References
www.debian.org/security/2017/dsa-3907
www.openwall.com/lists/oss-security/2017/07/14/1
www.securityfocus.com/bid/99583
access.redhat.com/errata/RHBA-2017:2529
access.redhat.com/errata/RHSA-2017:2471
access.redhat.com/errata/RHSA-2018:3522
access.redhat.com/security/cve/CVE-2017-7506
access.redhat.com/security/updates/classification/#important
bugzilla.redhat.com/show_bug.cgi?id=1452606
Related
suse
suse
Security update for spice (important)
2017-07-11 21:10:12
Security update for spice (important)
2017-07-11 21:14:14
Security update for spice (important)
2017-07-12 18:10:38
nessus
nessus
Fedora 24 : spice (2017-61689edaf4)
2017-07-21 00:00:00
Oracle Linux 7 : spice (ELSA-2017-2471)
2017-08-16 00:00:00
CentOS 6 : spice-server (CESA-2018:3522)
2018-11-21 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-3355-1)
2017-07-20 00:00:00
RedHat Update for spice RHSA-2017:2471-01
2017-08-15 00:00:00
CentOS Update for spice-server CESA-2018:3522 centos6
2018-11-21 00:00:00
nvd
nvd
CVE-2017-7506
2017-07-18 15:29:00
oraclelinux
oraclelinux
spice-server security update
2018-11-08 00:00:00
spice security update
2017-08-15 00:00:00
spice-server security update
2019-01-31 00:00:00
ubuntucve
ubuntucve
CVE-2017-7506
2017-07-11 00:00:00
osv
osv
spice - security update
2017-07-11 00:00:00
CVE-2017-7506
2017-07-18 15:29:00
cve
cve
CVE-2017-7506
2017-07-18 15:29:00
redhat
redhat
(RHSA-2017:2471) Important: spice security update
2017-08-15 03:03:50
(RHSA-2018:3522) Important: spice-server security update
2018-11-07 22:23:33
debian
debian
[SECURITY] [DSA 3907-1] spice security update
2017-07-11 21:31:14
cvelist
cvelist
CVE-2017-7506
2017-07-18 15:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: spice-0.12.8-3.fc24
2017-07-20 18:49:10
alpinelinux
alpinelinux
CVE-2017-7506
2017-07-18 15:29:00
centos
centos
spice security update
2018-11-20 14:49:17
spice security update
2017-08-24 09:44:09
ibm
ibm
Security Bulletin: A vulnerability in Spice affects PowerKVM
2018-06-18 01:38:03
ubuntu
ubuntu
Spice vulnerability
2017-07-19 00:00:00
prion
prion
Out-of-bounds
2017-07-18 15:29:00
mageia
mageia
Updated spice packages fix security vulnerability
2017-08-03 22:05:47
archlinux
archlinux
[ASA-201708-12] spice: arbitrary code execution
2017-08-14 00:00:00
debiancve
debiancve
CVE-2017-7506
2017-07-18 15:29:00
redhatcve
redhatcve
CVE-2017-7506
2017-07-11 07:19:24