Denial Of Service (DoS)

spice-vdagent is vulnerable to denial of service. There is no limit to the number of client connections that can be established via the UNIX domain socket in /run/spice-vdagentd/spice-vdagent-sock, and are not subjected to timeout or any preconditions for them to stay alive. Any local user in the VM can prevent legitimate spice-vdagent instances from connecting to the spice-vdagentd daemon. This results in spice-vdagentd not being able to open further connections for legitimate clients or perform other tasks.