The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt. This may lead to a denial of service, or, in the worst case, code-execution by unauthenticated attackers.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade spice | Feb 15, 2019 | Feb 4, 2019 |
| Amazon Linux Ami 2 | — | Upgrade spice-debuginfoUpgrade spice-server-develUpgrade spice-server | Apr 27, 2020 | Feb 4, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 4, 2019 |
| Centos_linux | — | Upgrade spice-debuginfoUpgrade spice-server-develUpgrade spice-server-debuginfoUpgrade spice-server | Feb 12, 2019 | Jan 29, 2019 |
| Debian | — | Upgrade spice | Jan 30, 2019 | Jan 29, 2019 |
| Gentoo Linux | — | Upgrade app-emulation/spice. | Jul 28, 2020 | Feb 4, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade spice-server | Apr 2, 2019 | Feb 4, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade spice-server | Mar 27, 2019 | Feb 4, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade spice-server | Mar 11, 2019 | Feb 4, 2019 |
| Oracle_linux | — | Upgrade spice-server-develUpgrade spice-server | Feb 1, 2019 | Jan 28, 2019 |
| Redhat_linux | — | Upgrade spice-serverUpgrade spice-server-develUpgrade spice-debuginfoUpgrade spice-server-debuginfo | Feb 1, 2019 | Jan 31, 2019 |
| Suse | — | Upgrade libspice-server1Upgrade libspice-server-devel | Feb 6, 2019 | Jan 29, 2019 |
| Ubuntu | — | Upgrade libspice-server1 | Feb 5, 2019 | Jan 28, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub