The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade spice | Nov 9, 2018 | Aug 17, 2018 |
| Centos_linux | — | Upgrade spice-gtk3-valaUpgrade spice-server-develUpgrade spice-glib-develUpgrade spice-gtk-pythonUpgrade spice-serverUpgrade spice-gtkUpgrade spice-gtk-debuginfoUpgrade spice-gtk-develUpgrade spice-debuginfoUpgrade spice-server-debuginfoUpgrade spice-glibUpgrade spice-gtk3-develUpgrade spice-gtk3Upgrade spice-gtk-tools | Oct 2, 2018 | Aug 17, 2018 |
| Debian | — | Upgrade spiceUpgrade spice-gtk | Oct 16, 2018 | Aug 17, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade spice-server | Nov 6, 2018 | Aug 17, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade spice-server | Nov 8, 2018 | Aug 17, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade spice-server | Jan 9, 2019 | Aug 17, 2018 |
| Oracle_linux | — | Upgrade spice-gtk-toolsUpgrade spice-gtk3-valaUpgrade spice-glib-develUpgrade spice-gtk-develUpgrade spice-server-develUpgrade spice-gtkUpgrade spice-gtk3Upgrade spice-gtk3-develUpgrade spice-glibUpgrade spice-serverUpgrade spice-gtk-python | Sep 21, 2018 | Aug 16, 2018 |
| Redhat_linux | — | Upgrade spice-serverUpgrade spice-gtk3-develUpgrade spice-gtk-pythonUpgrade spice-debuginfoUpgrade spice-gtk-toolsUpgrade spice-glibUpgrade spice-server-develUpgrade spice-gtk3Upgrade spice-gtkUpgrade spice-gtk3-valaUpgrade spice-glib-develUpgrade spice-gtk-develUpgrade spice-server-debuginfoUpgrade spice-gtk-debuginfo | Sep 24, 2018 | Aug 17, 2018 |
| Suse | — | Upgrade libspice-client-gtk-3_0-4Upgrade libspice-client-glib-helperUpgrade spice-gtk-develUpgrade libspice-client-glib-2_0-8Upgrade libspice-client-gtk-3_0-5Upgrade typelib-1_0-SpiceClientGtk-3_0Upgrade spice-gtk-langUpgrade libspice-server1Upgrade typelib-1_0-SpiceClientGlib-2_0Upgrade libspice-controller0Upgrade libspice-server-develUpgrade libspice-client-gtk-2_0-4Upgrade spice-gtk | Aug 31, 2018 | Aug 17, 2018 |
| Ubuntu | — | Upgrade libspice-protocol-devUpgrade libspice-server1 | Aug 31, 2018 | Aug 17, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub