Every CVE Search/ Get API key

CVE-2017-7506

spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing...

8.8 HighFix available

spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

4.20%Up 2.8 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 8.8

spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.

Record
CVE-2017-7506
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.

Record
CVE-2017-7506
Weakness
CWE-119
Updated
2026-11-02
EUVDEUVD-2017-16523 No score

spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.

Record
EUVD-2017-16523
Updated
2026-11-03
GitHub AdvisoriesGHSA-3pjw-h9v6-f5x8 8.8

spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing...

spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.

Record
GHSA-3pjw-h9v6-f5x8
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-119
Updated
2026-11-02
OSVALPINE-CVE-2017-7506 8.8

spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.

Record
ALPINE-CVE-2017-7506
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVBELL-CVE-2017-7506 8.8

CVE-2017-7506 does not affect BellSoft software

Record
BELL-CVE-2017-7506
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 13 moreShow less
OSV 8.8

spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.

Record
CVE-2017-7506
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2017-7506 8.8

spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.

Record
DEBIAN-CVE-2017-7506
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHBA-2017:2529 9.1

Red Hat Bug Fix Advisory: redhat-virtualization-host bug fix, and enhancement update for RHV 4.1.5

Record
RHBA-2017:2529
CVSS 3.0
9.1 CriticalCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
Updated
2026-11-02
OSVRHSA-2017:2471 9.1

Red Hat Security Advisory: spice security update

Record
RHSA-2017:2471
CVSS 3.0
9.1 CriticalCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
Updated
2026-11-02
OSVRHSA-2018:3522 9.1

Red Hat Security Advisory: spice-server security update

Record
RHSA-2018:3522
CVSS 3.0
9.1 CriticalCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2017-7506 8.8

spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.

Record
UBUNTU-CVE-2017-7506
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2017-0239 No score

Updated spice packages fix security vulnerability

A vulnerability was discovered in spice, in the server's protocol handling. An authenticated attacker could send specially crafted messages to the spice server, causing out-of-bounds memory accesses leading to parts of server memory being leaked or a crash (CVE-2017-7506).

The Mageia 5 package has been patched to fix this issue. The Mageia 6 package has been updated to version 0.13.90, containing fixes for this and several other issues.

Record
MGASA-2017-0239
Updated
2026-11-02
OSVSUSE-SU-2017:1832-1 No score

Security update for spice

This update for spice fixes the following issues:

  • CVE-2017-7506: A possible buffer overflow via invalid monitor configurations (bsc#1046779)
Record
SUSE-SU-2017:1832-1
Updated
2026-11-02
OSVSUSE-SU-2017:1836-1 No score

Security update for spice

This update for spice fixes the following issues:

  • CVE-2017-7506: A possible buffer overflow via invalid monitor configurations (bsc#1046779)
Record
SUSE-SU-2017:1836-1
Updated
2026-11-02
OSVSUSE-SU-2017:1837-1 No score

Security update for spice

This update for spice fixes the following issues:

  • CVE-2017-7506: A possible buffer overflow via invalid monitor configurations (bsc#1046779)
Record
SUSE-SU-2017:1837-1
Updated
2026-11-02
OSVSUSE-SU-2017:1839-1 No score

Security update for spice

This update for spice fixes the following issues:

  • CVE-2017-7506: A possible buffer overflow via invalid monitor configurations (bsc#1046779)
Record
SUSE-SU-2017:1839-1
Updated
2026-11-02
OSVSUSE-SU-2017:2552-1 No score

Security update for spice

This update for spice fixes the following security issues:

  • CVE-2017-7506: Fixed an out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak (bsc#1046779).
Record
SUSE-SU-2017:2552-1
Updated
2026-11-02
OSVUSN-3355-1 No score

spice vulnerability

Frediano Ziglio discovered that Spice incorrectly handled certain invalid monitor configurations. A remote attacker could use this issue to cause Spice to crash, resulting in a denial of service, or possibly execute arbitrary code.

Record
USN-3355-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
spice
Alpine:v3.10
 before 0.12.8-r4
0.12.8-r4
spice
Alpine:v3.11
 before 0.12.8-r4
0.12.8-r4
spice
Alpine:v3.12
 before 0.12.8-r4
0.12.8-r4
spice
Alpine:v3.13
 before 0.12.8-r4
0.12.8-r4
spice
Alpine:v3.14
 before 0.12.8-r4
0.12.8-r4
spice
Alpine:v3.15
 before 0.12.8-r4
0.12.8-r4
spice
Alpine:v3.16
 before 0.12.8-r4
0.12.8-r4
spice
Alpine:v3.17
 before 0.12.8-r4
0.12.8-r4
spice
Alpine:v3.18
 before 0.12.8-r4
0.12.8-r4
spice
Alpine:v3.19
 before 0.12.8-r4
0.12.8-r4
Show 73 moreShow less
Affected packages
PackageAffectedFixed
spice
Alpine:v3.20
 before 0.12.8-r4
0.12.8-r4
spice
Alpine:v3.21
 before 0.12.8-r4
0.12.8-r4
spice
Alpine:v3.22
 before 0.12.8-r4
0.12.8-r4
spice
Alpine:v3.23
 before 0.12.8-r4
0.12.8-r4
spice
Alpine:v3.24
 before 0.12.8-r4
0.12.8-r4
spice
Alpine:v3.3
 before 0.12.6-r2
0.12.6-r2
spice
Alpine:v3.4
 before 0.12.7-r1
0.12.7-r1
spice
Alpine:v3.5
 before 0.12.8-r3
0.12.8-r3
spice
Alpine:v3.6
 before 0.13.3-r2
0.13.3-r2
spice
Alpine:v3.7
 before 0.12.8-r4
0.12.8-r4
spice
Alpine:v3.8
 before 0.12.8-r4
0.12.8-r4
spice
Alpine:v3.9
 before 0.12.8-r4
0.12.8-r4
spice
Debian:12
 before 0.12.8-2.2
0.12.8-2.2
spice
Debian:13
 before 0.12.8-2.2
0.12.8-2.2
spice
Debian:14
 before 0.12.8-2.2
0.12.8-2.2
spice
Debian:8
 before 0.12.5-1+deb8u5, plus listed versions
0.12.5-10.12.5-1+deb8u10.12.5-1+deb8u20.12.5-1+deb8u30.12.5-1+deb8u4
0.12.5-1+deb8u5
spice
Debian:9
 before 0.12.8-2.1+deb9u1, plus listed versions
0.12.8-2.1
0.12.8-2.1+deb9u1
spice
Mageia:5
 before 0.12.5-2.5.mga5
0.12.5-2.5.mga5
spice
Mageia:6
 before 0.13.90-1.mga6
0.13.90-1.mga6
spice-protocol
Mageia:6
 before 0.12.13-1.mga6
0.12.13-1.mga6
redhat-virtualization-host
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.1-20170816.2.el7_4
0:4.1-20170816.2.el7_4
redhat-virtualization-host-image-update
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.1-20170816.2.el7_4
0:4.1-20170816.2.el7_4
imgbased
Red Hat:enterprise_linux:7::hypervisor
 before 0:0.9.47-0.1.el7ev
0:0.9.47-0.1.el7ev
ovirt-node-ng
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.1.5-0.20170810.0.el7
0:4.1.5-0.20170810.0.el7
ovirt-node-ng-nodectl
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.1.5-0.20170810.0.el7
0:4.1.5-0.20170810.0.el7
redhat-release-virtualization-host
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.1-5.0.el7
0:4.1-5.0.el7
redhat-virtualization-host-image-update-placeholder
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.1-5.0.el7
0:4.1-5.0.el7
spice
Red Hat:enterprise_linux:7::client
 before 0:0.12.8-2.el7.1
0:0.12.8-2.el7.1
spice-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:0.12.8-2.el7.1
0:0.12.8-2.el7.1
spice-server
Red Hat:enterprise_linux:7::client
 before 0:0.12.8-2.el7.1
0:0.12.8-2.el7.1
spice-server-devel
Red Hat:enterprise_linux:7::client
 before 0:0.12.8-2.el7.1
0:0.12.8-2.el7.1
spice
Red Hat:enterprise_linux:7::computenode
 before 0:0.12.8-2.el7.1
0:0.12.8-2.el7.1
spice-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:0.12.8-2.el7.1
0:0.12.8-2.el7.1
spice-server
Red Hat:enterprise_linux:7::computenode
 before 0:0.12.8-2.el7.1
0:0.12.8-2.el7.1
spice-server-devel
Red Hat:enterprise_linux:7::computenode
 before 0:0.12.8-2.el7.1
0:0.12.8-2.el7.1
spice
Red Hat:enterprise_linux:7::server
 before 0:0.12.8-2.el7.1
0:0.12.8-2.el7.1
spice-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:0.12.8-2.el7.1
0:0.12.8-2.el7.1
spice-server
Red Hat:enterprise_linux:7::server
 before 0:0.12.8-2.el7.1
0:0.12.8-2.el7.1
spice-server-devel
Red Hat:enterprise_linux:7::server
 before 0:0.12.8-2.el7.1
0:0.12.8-2.el7.1
spice
Red Hat:enterprise_linux:7::workstation
 before 0:0.12.8-2.el7.1
0:0.12.8-2.el7.1
spice-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:0.12.8-2.el7.1
0:0.12.8-2.el7.1
spice-server
Red Hat:enterprise_linux:7::workstation
 before 0:0.12.8-2.el7.1
0:0.12.8-2.el7.1
spice-server-devel
Red Hat:enterprise_linux:7::workstation
 before 0:0.12.8-2.el7.1
0:0.12.8-2.el7.1
spice-server
Red Hat:enterprise_linux:6::client
 before 0:0.12.4-16.el6_10.2
0:0.12.4-16.el6_10.2
spice-server-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:0.12.4-16.el6_10.2
0:0.12.4-16.el6_10.2
spice-server-devel
Red Hat:enterprise_linux:6::client
 before 0:0.12.4-16.el6_10.2
0:0.12.4-16.el6_10.2
spice-server
Red Hat:enterprise_linux:6::computenode
 before 0:0.12.4-16.el6_10.2
0:0.12.4-16.el6_10.2
spice-server-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:0.12.4-16.el6_10.2
0:0.12.4-16.el6_10.2
spice-server-devel
Red Hat:enterprise_linux:6::computenode
 before 0:0.12.4-16.el6_10.2
0:0.12.4-16.el6_10.2
spice-server
Red Hat:enterprise_linux:6::server
 before 0:0.12.4-16.el6_10.2
0:0.12.4-16.el6_10.2
spice-server-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:0.12.4-16.el6_10.2
0:0.12.4-16.el6_10.2
spice-server-devel
Red Hat:enterprise_linux:6::server
 before 0:0.12.4-16.el6_10.2
0:0.12.4-16.el6_10.2
spice-server
Red Hat:enterprise_linux:6::workstation
 before 0:0.12.4-16.el6_10.2
0:0.12.4-16.el6_10.2
spice-server-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:0.12.4-16.el6_10.2
0:0.12.4-16.el6_10.2
spice-server-devel
Red Hat:enterprise_linux:6::workstation
 before 0:0.12.4-16.el6_10.2
0:0.12.4-16.el6_10.2
spice
SUSE:OpenStack Cloud 6
 before 0.12.5-10.1
0.12.5-10.1
spice
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 0.12.5-10.1
0.12.5-10.1
spice
SUSE:Linux Enterprise Server 12 SP1-LTSS
 before 0.12.5-10.1
0.12.5-10.1
spice
SUSE:Linux Enterprise Desktop 12 SP2
 before 0.12.7-10.3.1
0.12.7-10.3.1
spice
SUSE:Linux Enterprise Software Development Kit 12 SP2
 before 0.12.7-10.3.1
0.12.7-10.3.1
spice
SUSE:Linux Enterprise Server 12 SP2
 before 0.12.7-10.3.1
0.12.7-10.3.1
spice
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 0.12.7-10.3.1
0.12.7-10.3.1
spice
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 0.12.4-11.1
0.12.4-11.1
spice
SUSE:Linux Enterprise Server 11 SP4
 before 0.12.4-11.1
0.12.4-11.1
spice
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 0.12.4-11.1
0.12.4-11.1
spice
SUSE:Linux Enterprise Server for SAP Applications 12
 before 0.12.4-8.15.1
0.12.4-8.15.1
spice
SUSE:Linux Enterprise Server 12-LTSS
 before 0.12.4-8.15.1
0.12.4-8.15.1
spice
SUSE:Linux Enterprise Desktop 12 SP3
 before 0.12.8-3.9
0.12.8-3.9
spice
SUSE:Linux Enterprise Software Development Kit 12 SP3
 before 0.12.8-3.9
0.12.8-3.9
spice
SUSE:Linux Enterprise Server 12 SP3
 before 0.12.8-3.9
0.12.8-3.9
spice
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 0.12.8-3.9
0.12.8-3.9
spice
Ubuntu:14.04:LTS
 before 0.12.4-0nocelt2ubuntu1.5, plus listed versions
0.12.4-0nocelt10.12.4-0nocelt1.10.12.4-0nocelt1.1ubuntu10.12.4-0nocelt20.12.4-0nocelt2ubuntu1
Show 4 moreShow less
0.12.4-0nocelt2ubuntu1.10.12.4-0nocelt2ubuntu1.20.12.4-0nocelt2ubuntu1.30.12.4-0nocelt2ubuntu1.4
0.12.4-0nocelt2ubuntu1.5
spice
Ubuntu:16.04:LTS
 before 0.12.6-4ubuntu0.3, plus listed versions
0.12.5-1.1ubuntu20.12.6-40.12.6-4ubuntu0.10.12.6-4ubuntu0.2
0.12.6-4ubuntu0.3

History

History
RecordedChangedSources
aliases, productsEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-7506 is a high vulnerability (CVSS 8.8) in Red Hat, Inc. Spice, published July 11, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.20%, the 91st percentile. Fixed in spice 0.12.8-r4.

References

Show 28 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open