Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A malicious server could cause the client to crash or, potentially, execute arbitrary code.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade spice-gtk-debuginfoUpgrade spice-gtk-toolsUpgrade spice-protocolUpgrade spice-glib-develUpgrade libgovirt-develUpgrade spice-glibUpgrade libgovirt-debuginfoUpgrade spice-gtk3-valaUpgrade spice-gtk3Upgrade libgovirtUpgrade spice-gtk3-devel | Apr 27, 2020 | Sep 11, 2018 |
| Centos_linux | — | Upgrade spice-gtk3Upgrade libgovirt-debuginfoUpgrade libgovirt-develUpgrade spice-gtk-pythonUpgrade libgovirtUpgrade spice-vdagent-debuginfoUpgrade virt-viewerUpgrade spice-vdagentUpgrade spice-gtk3-valaUpgrade spice-glib-develUpgrade virt-viewer-debuginfoUpgrade spice-gtkUpgrade spice-gtk-debuginfoUpgrade spice-gtk-develUpgrade spice-glibUpgrade spice-gtk3-develUpgrade spice-gtk-tools | Aug 28, 2019 | Sep 11, 2018 |
| Debian | — | Upgrade spice-gtk | Jul 30, 2024 | Sep 11, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade spice-glibUpgrade spice-gtk3 | Jun 17, 2020 | Sep 11, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade spice-gtk3Upgrade spice-glib | Nov 19, 2019 | Sep 11, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade spice-glibUpgrade spice-gtk3 | Nov 19, 2019 | Sep 11, 2018 |
| Oracle_linux | — | Upgrade virt-viewerUpgrade libgovirt-develUpgrade libgovirtUpgrade spice-glibUpgrade spice-gtk-toolsUpgrade spice-gtk3Upgrade spice-gtk-pythonUpgrade spice-gtk-develUpgrade spice-gtk3-develUpgrade spice-vdagentUpgrade spice-gtkUpgrade spice-glib-develUpgrade spice-gtk3-vala | Feb 12, 2020 | Jun 25, 2018 |
| Redhat_linux | — | Upgrade spice-gtk-debuginfoUpgrade spice-glibUpgrade libgovirt-develUpgrade spice-gtkUpgrade virt-viewerUpgrade spice-vdagent-debuginfoUpgrade virt-viewer-debuginfoUpgrade spice-gtk-pythonUpgrade spice-vdagentNo solution existsUpgrade spice-glib-develUpgrade libgovirt-debuginfoUpgrade spice-gtk3-develUpgrade spice-gtk3Upgrade spice-gtk-toolsUpgrade spice-gtk-develUpgrade libgovirtUpgrade spice-gtk3-vala | Aug 7, 2019 | Sep 11, 2018 |
| Suse | — | Upgrade spice-gtkUpgrade libspice-controller0Upgrade spice-gtk-develUpgrade spice-gtk-langUpgrade libspice-client-gtk-2_0-4Upgrade libspice-server1Upgrade typelib-1_0-SpiceClientGlib-2_0Upgrade libspice-server-develUpgrade libspice-client-glib-helperUpgrade libspice-client-gtk-3_0-4Upgrade libspice-client-glib-2_0-8Upgrade typelib-1_0-SpiceClientGtk-3_0Upgrade libspice-client-gtk-3_0-5 | Aug 31, 2018 | Aug 30, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 11, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub