vulnerability

Huawei EulerOS: CVE-2017-12194: spice-gtk security update

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
Mar 14, 2018
Added
Feb 3, 2021
Modified
Aug 13, 2025

Description

A flaw was found in the way spice-client processed certain messages sent from the server. An attacker, having control of malicious spice-server, could use this flaw to crash the client or execute arbitrary code with permissions of the user running the client. spice-gtk versions through 0.34 are believed to be vulnerable.

Solutions

huawei-euleros-2_0_sp5-upgrade-spice-glibhuawei-euleros-2_0_sp5-upgrade-spice-gtk3
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.