A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to crash.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade spice | Aug 22, 2024 | Jul 27, 2018 |
| Centos_linux | — | Upgrade spice-serverUpgrade spice-debuginfoUpgrade spice-server-develUpgrade spice-server-debuginfo | Feb 7, 2017 | Feb 6, 2017 |
| Debian | — | Upgrade spice | Feb 18, 2017 | Feb 6, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade spice-server | Aug 28, 2019 | Jul 27, 2018 |
| Oracle_linux | — | Upgrade spice-server-develUpgrade spice-server | Feb 6, 2017 | Feb 6, 2017 |
| Redhat_linux | — | Upgrade spice-debuginfoUpgrade spice-server-debuginfoUpgrade spice-server-develUpgrade spice-server | Feb 6, 2017 | Feb 6, 2017 |
| Suse | — | Upgrade libspice-server-develUpgrade libspice-server1 | Feb 7, 2017 | Feb 6, 2017 |
| Ubuntu | — | Upgrade libspice-server1 | Feb 21, 2017 | Feb 6, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub