ALT-PU-2017-1042-1
Closed vulnerabilities
Published: 2017-05-19
BDU:2018-00028
Уязвимость библиотеки spice, связанная с переполнением буфера, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
Severity: HIGH (8.8)
Vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: MEDIUM (6.5)
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
References:
Published: 2017-07-18
Modified: 2025-04-20
Modified: 2025-04-20
CVE-2017-7506
spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.
Severity: MEDIUM (6.5)
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Severity: HIGH (8.8)
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References:
- http://www.debian.org/security/2017/dsa-3907
- http://www.openwall.com/lists/oss-security/2017/07/14/1
- http://www.securityfocus.com/bid/99583
- https://access.redhat.com/errata/RHSA-2017:2471
- https://access.redhat.com/errata/RHSA-2018:3522
- https://bugzilla.redhat.com/show_bug.cgi?id=1452606
- http://www.debian.org/security/2017/dsa-3907
- http://www.openwall.com/lists/oss-security/2017/07/14/1
- http://www.securityfocus.com/bid/99583
- https://access.redhat.com/errata/RHSA-2017:2471
- https://access.redhat.com/errata/RHSA-2018:3522
- https://bugzilla.redhat.com/show_bug.cgi?id=1452606