Back to search
CVE-2017-7506
Published: Jul 18, 2017
Modified: Aug 5, 2024
PUBLISHED
Description
spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.
| Vendor | Product | Versions |
|---|---|---|
The SPICE Project | spice | affected all versions through 0.13 |
Weaknesses (CWE)
References
RHSA-2018:3522
vendor-advisory
x_refsource_REDHAT
[oss-security] 20170714 CVE-2017-7506 spice: Possible buffer overflow via invalid monitor configurations
mailing-list
x_refsource_MLIST
RHSA-2017:2471
vendor-advisory
x_refsource_REDHAT
DSA-3907
vendor-advisory
x_refsource_DEBIAN
99583
vdb-entry
x_refsource_BID
https://bugzilla.redhat.com/show_bug.cgi?id=1452606
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now