A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to crash.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade spice | Aug 22, 2024 | Jul 27, 2018 |
| Centos_linux | — | Upgrade spice-serverUpgrade spice-server-develUpgrade spice-debuginfoUpgrade spice-server-debuginfo | Feb 7, 2017 | Feb 6, 2017 |
| Debian | — | Upgrade spice | Feb 18, 2017 | Feb 6, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade spice-server | Aug 28, 2019 | Jul 27, 2018 |
| Oracle_linux | — | Upgrade spice-serverUpgrade spice-server-devel | Feb 6, 2017 | Feb 6, 2017 |
| Redhat_linux | — | Upgrade spice-server-debuginfoUpgrade spice-server-develUpgrade spice-serverUpgrade spice-debuginfo | Feb 6, 2017 | Feb 6, 2017 |
| Suse | — | Upgrade libspice-server1Upgrade libspice-server-devel | Feb 7, 2017 | Feb 6, 2017 |
| Ubuntu | — | Upgrade libspice-server1 | Feb 21, 2017 | Feb 6, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub