Published: 17/08/2018 Updated: 09/10/2019

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 578

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability exists in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts.

Vulnerable Product	Search on Vulmon	Subscribe to Product
spice project spice
debian debian linux 8.0
debian debian linux 9.0
canonical ubuntu linux 14.04
canonical ubuntu linux 16.04
canonical ubuntu linux 18.04
redhat enterprise linux desktop 6.0
redhat enterprise linux workstation 6.0
redhat enterprise linux server tus 7.6
redhat virtualization host 4.0
redhat enterprise linux server 7.0
redhat enterprise linux workstation 7.0
redhat enterprise linux server aus 7.6
redhat enterprise linux server eus 7.5
redhat enterprise linux server eus 7.6
redhat enterprise linux server 6.0
redhat enterprise linux desktop 7.0
redhat virtualization 4.0

Spice could be made to crash if it received specially crafted network traffic ...

Debian Bug report logs - #906315 spice: CVE-2018-10873: Missing check in demarshalpy:write_validate_array_item() allows for buffer overflow and denial of service Package: src:spice; Maintainer for src:spice is Liang Guo <guoliang@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 17 Aug 201 ...

Debian Bug report logs - #898503 spice-gtk: CVE-2017-12194: Integer overflows causing buffer overflows in spice-client Package: src:spice-gtk; Maintainer for src:spice-gtk is Liang Guo <guoliang@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 12 May 2018 20:21:01 UTC Severity: important ...

Synopsis Important: spice and spice-gtk security update Type/Severity Security Advisory: Important Topic An update for spice and spice-gtk is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring S ...

Synopsis Important: spice-gtk and spice-server security update Type/Severity Security Advisory: Important Topic An update for spice-gtk and spice-server is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerabi ...

Synopsis Moderate: Red Hat Virtualization security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for imgbased, redhat-release-virtualization-host, and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7Red Hat Product Securi ...

Frediano Ziglio reported a missing check in the script to generate demarshalling code in the SPICE protocol client and server library The generated demarshalling code is prone to multiple buffer overflows An authenticated attacker can take advantage of this flaw to cause a denial of service (spice server crash), or possibly, execute arbitrary cod ...

A vulnerability was discovered in SPICE where the generated code used for demarshalling messages lacked sufficient bounds checks A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts ...

CWE-20 https://gitlab.freedesktop.org/spice/spice-common/commit/bb15d4815ab586b4c4a20f4a565970a44824c42c https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10873 https://usn.ubuntu.com/3751-1/http://www.securityfocus.com/bid/105152 https://lists.debian.org/debian-lts-announce/2018/08/msg00038.html https://lists.debian.org/debian-lts-announce/2018/08/msg00037.html https://lists.debian.org/debian-lts-announce/2018/08/msg00035.html https://access.redhat.com/errata/RHSA-2018:2732 https://access.redhat.com/errata/RHSA-2018:2731 https://www.debian.org/security/2018/dsa-4319 https://access.redhat.com/errata/RHSA-2018:3470 https://usn.ubuntu.com/3751-1/https://nvd.nist.gov

CVE-2018-10873

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect