{"id":"CVE-2017-7506","aliases":["ALPINE-CVE-2017-7506","BELL-CVE-2017-7506","DEBIAN-CVE-2017-7506","DSA-3907-1","EUVD-2017-16523","GHSA-3pjw-h9v6-f5x8","MGASA-2017-0239","RHBA-2017:2529","RHSA-2017:2471","RHSA-2018:3522","SUSE-SU-2017:1832-1","SUSE-SU-2017:1836-1","SUSE-SU-2017:1837-1","SUSE-SU-2017:1839-1","SUSE-SU-2017:2552-1","UBUNTU-CVE-2017-7506","USN-3355-1"],"status":"published","title":"spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing...","description":"spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04204,"percentile":0.9103,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2017-07-11T00:00:00Z","modified":"2026-10-24T10:30:44Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"spice","fixed_in":["0.12.8-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"spice","fixed_in":["0.12.8-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"spice","fixed_in":["0.12.8-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"spice","fixed_in":["0.12.8-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"spice","fixed_in":["0.12.8-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"spice","fixed_in":["0.12.8-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"spice","fixed_in":["0.12.8-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"spice","fixed_in":["0.12.8-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"spice","fixed_in":["0.12.8-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"spice","fixed_in":["0.12.8-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"spice","fixed_in":["0.12.8-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"spice","fixed_in":["0.12.8-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"spice","fixed_in":["0.12.8-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"spice","fixed_in":["0.12.8-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"spice","fixed_in":["0.12.8-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.3","package":"spice","fixed_in":["0.12.6-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"spice","fixed_in":["0.12.7-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"spice","fixed_in":["0.12.8-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"spice","fixed_in":["0.13.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"spice","fixed_in":["0.12.8-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"spice","fixed_in":["0.12.8-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"spice","fixed_in":["0.12.8-r4"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"spice","fixed_in":["0.12.8-2.2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"spice","fixed_in":["0.12.8-2.2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"spice","fixed_in":["0.12.8-2.2"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"spice","fixed_in":["0.12.5-1+deb8u5"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"spice","fixed_in":["0.12.8-2.1+deb9u1"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"spice","fixed_in":["0.12.5-2.5.mga5"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"spice","fixed_in":["0.13.90-1.mga6"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"spice-protocol","fixed_in":["0.12.13-1.mga6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host","fixed_in":["0:4.1-20170816.2.el7_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host-image-update","fixed_in":["0:4.1-20170816.2.el7_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"imgbased","fixed_in":["0:0.9.47-0.1.el7ev"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"ovirt-node-ng","fixed_in":["0:4.1.5-0.20170810.0.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"ovirt-node-ng-nodectl","fixed_in":["0:4.1.5-0.20170810.0.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-release-virtualization-host","fixed_in":["0:4.1-5.0.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host-image-update-placeholder","fixed_in":["0:4.1-5.0.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice","fixed_in":["0:0.12.8-2.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-debuginfo","fixed_in":["0:0.12.8-2.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-server","fixed_in":["0:0.12.8-2.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-server-devel","fixed_in":["0:0.12.8-2.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"spice","fixed_in":["0:0.12.8-2.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"spice-debuginfo","fixed_in":["0:0.12.8-2.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"spice-server","fixed_in":["0:0.12.8-2.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"spice-server-devel","fixed_in":["0:0.12.8-2.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice","fixed_in":["0:0.12.8-2.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-debuginfo","fixed_in":["0:0.12.8-2.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-server","fixed_in":["0:0.12.8-2.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-server-devel","fixed_in":["0:0.12.8-2.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice","fixed_in":["0:0.12.8-2.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-debuginfo","fixed_in":["0:0.12.8-2.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-server","fixed_in":["0:0.12.8-2.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-server-devel","fixed_in":["0:0.12.8-2.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-server","fixed_in":["0:0.12.4-16.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-server-debuginfo","fixed_in":["0:0.12.4-16.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-server-devel","fixed_in":["0:0.12.4-16.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-server","fixed_in":["0:0.12.4-16.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-server-debuginfo","fixed_in":["0:0.12.4-16.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-server-devel","fixed_in":["0:0.12.4-16.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-server","fixed_in":["0:0.12.4-16.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-server-debuginfo","fixed_in":["0:0.12.4-16.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-server-devel","fixed_in":["0:0.12.4-16.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-server","fixed_in":["0:0.12.4-16.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-server-debuginfo","fixed_in":["0:0.12.4-16.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-server-devel","fixed_in":["0:0.12.4-16.el6_10.2"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 6","package":"spice","fixed_in":["0.12.5-10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"spice","fixed_in":["0.12.5-10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"spice","fixed_in":["0.12.5-10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"spice","fixed_in":["0.12.7-10.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"spice","fixed_in":["0.12.7-10.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"spice","fixed_in":["0.12.7-10.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"spice","fixed_in":["0.12.7-10.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"spice","fixed_in":["0.12.4-11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"spice","fixed_in":["0.12.4-11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"spice","fixed_in":["0.12.4-11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"spice","fixed_in":["0.12.4-8.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"spice","fixed_in":["0.12.4-8.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"spice","fixed_in":["0.12.8-3.9"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"spice","fixed_in":["0.12.8-3.9"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"spice","fixed_in":["0.12.8-3.9"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"spice","fixed_in":["0.12.8-3.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"spice","fixed_in":["0.12.4-0nocelt2ubuntu1.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"spice","fixed_in":["0.12.6-4ubuntu0.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.3","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.6-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.7-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-r4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-2.2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-2.2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-2.2"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.5-1+deb8u5"}]}],"versions":["0.12.5-1","0.12.5-1+deb8u1","0.12.5-1+deb8u2","0.12.5-1+deb8u3","0.12.5-1+deb8u4"]},{"source":"osv","ecosystem":"Debian:9","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-2.1+deb9u1"}]}],"versions":["0.12.8-2.1"]},{"source":"osv","ecosystem":"Mageia:5","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.5-2.5.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.90-1.mga6"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"spice-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-1.mga6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1-20170816.2.el7_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host-image-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1-20170816.2.el7_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"imgbased","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.47-0.1.el7ev"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"ovirt-node-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.5-0.20170810.0.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"ovirt-node-ng-nodectl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.5-0.20170810.0.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-release-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1-5.0.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host-image-update-placeholder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1-5.0.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.8-2.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.8-2.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.8-2.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.8-2.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.8-2.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"spice-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.8-2.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"spice-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.8-2.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"spice-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.8-2.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.8-2.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.8-2.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.8-2.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.8-2.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.8-2.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.8-2.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.8-2.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.8-2.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.4-16.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.4-16.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.4-16.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.4-16.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.4-16.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.4-16.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.4-16.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.4-16.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.4-16.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.4-16.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.4-16.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.4-16.el6_10.2"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.5-10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.5-10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.5-10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.7-10.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.7-10.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.7-10.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.7-10.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.4-11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.4-11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.4-11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.4-8.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.4-8.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-3.9"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-3.9"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-3.9"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-3.9"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.4-0nocelt2ubuntu1.5"}]}],"versions":["0.12.4-0nocelt1","0.12.4-0nocelt1.1","0.12.4-0nocelt1.1ubuntu1","0.12.4-0nocelt2","0.12.4-0nocelt2ubuntu1","0.12.4-0nocelt2ubuntu1.1","0.12.4-0nocelt2ubuntu1.2","0.12.4-0nocelt2ubuntu1.3","0.12.4-0nocelt2ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.6-4ubuntu0.3"}]}],"versions":["0.12.5-1.1ubuntu2","0.12.6-4","0.12.6-4ubuntu0.1","0.12.6-4ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.4-0nocelt2ubuntu1.5"}]}],"versions":["0.12.4-0nocelt1","0.12.4-0nocelt1.1","0.12.4-0nocelt1.1ubuntu1","0.12.4-0nocelt2","0.12.4-0nocelt2ubuntu1","0.12.4-0nocelt2ubuntu1.1","0.12.4-0nocelt2ubuntu1.2","0.12.4-0nocelt2ubuntu1.3","0.12.4-0nocelt2ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.6-4ubuntu0.3"}]}],"versions":["0.12.5-1.1ubuntu2","0.12.6-4","0.12.6-4ubuntu0.1","0.12.6-4ubuntu0.2"]}],"products":[{"vendor":"red hat, inc.","product":"spice"},{"vendor":"spice_project","product":"spice"},{"vendor":"the spice project","product":"spice"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2018:3522","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2017/07/14/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2471","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3907","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/99583","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452606","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7506","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2017:2529","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7506","tags":["report"]},{"url":"https://github.com/advisories/GHSA-3pjw-h9v6-f5x8"},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-7506","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2017-7506","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-7506","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0239.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21230","tags":["report"]},{"url":"https://cgit.freedesktop.org/spice/spice/tree/NEWS?id=34dff543bef7a5201f41c72353a65840bd37c275","tags":["web"]},{"url":"https://www.debian.org/security/2017/dsa-3907","tags":["web"]},{"url":"https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00013.html","tags":["web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1473307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1476650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1481948","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhba-2017_2529.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7506","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2471.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3522.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171832-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1046779","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7506","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171836-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171837-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171839-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172552-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-7506","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3355-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2017-7506","description":"spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.","status":"published","published":"2017-07-18T15:00:00Z","modified":"2024-08-05T16:04:11.818Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:33:20.488433Z"}],"euvd":[{"id":"EUVD-2017-16523","description":"spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.","status":"published","published":"2017-07-18T15:00:00Z","modified":"2024-08-05T16:04:11Z","updated_at":"2026-11-03T02:39:08.024596Z"}],"ghsa":[{"id":"GHSA-3pjw-h9v6-f5x8","title":"spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing...","description":"spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.","status":"published","published":"2022-05-14T02:01:21Z","modified":"2023-02-10T05:06:48Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:54:02.847747Z"}],"nvd":[{"id":"CVE-2017-7506","description":"spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.","status":"published","published":"2017-07-18T15:29:00.173Z","modified":"2026-06-17T01:24:29.237Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:54.012105Z"}],"osv":[{"id":"ALPINE-CVE-2017-7506","description":"spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.","status":"published","published":"2017-07-18T15:29:00.173Z","modified":"2026-06-15T18:18:07.029893851Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"BELL-CVE-2017-7506","title":"CVE-2017-7506 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:26.160122Z","modified":"2026-01-26T09:46:27.965333Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:14.137943Z"},{"id":"CVE-2017-7506","description":"spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.","status":"published","published":"2017-07-18T15:29:00.173Z","modified":"2026-10-24T10:30:44.516275937Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:06.412595Z"},{"id":"DEBIAN-CVE-2017-7506","description":"spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.","status":"published","published":"2017-07-18T15:29:00.173Z","modified":"2026-09-01T20:03:50.083918957Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.412243Z"},{"id":"RHBA-2017:2529","title":"Red Hat Bug Fix Advisory: redhat-virtualization-host bug fix, and enhancement update for RHV 4.1.5","status":"published","published":"2024-09-13T11:57:51Z","modified":"2026-06-29T10:14:43Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"RHSA-2017:2471","title":"Red Hat Security Advisory: spice security update","status":"published","published":"2024-09-13T12:00:47Z","modified":"2026-06-29T10:17:22Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2018:3522","title":"Red Hat Security Advisory: spice-server security update","status":"published","published":"2024-09-13T12:02:28Z","modified":"2026-06-29T10:22:44Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"UBUNTU-CVE-2017-7506","description":"spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.","status":"published","published":"2017-07-11T00:00:00Z","modified":"2026-04-22T11:31:50.457343Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:15.773974Z"},{"id":"DSA-3907-1","title":"spice - security update","status":"published","published":"2017-07-11T00:00:00Z","modified":"2026-03-09T02:08:44.96782Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0239","title":"Updated spice packages fix security vulnerability","description":"A vulnerability was discovered in spice, in the server's protocol handling. An\nauthenticated attacker could send specially crafted messages to the spice\nserver, causing out-of-bounds memory accesses leading to parts of server memory\nbeing leaked or a crash (CVE-2017-7506).\n\nThe Mageia 5 package has been patched to fix this issue.  The Mageia 6 package\nhas been updated to version 0.13.90, containing fixes for this and several other\nissues.\n","status":"published","published":"2017-08-03T19:05:47Z","modified":"2026-04-16T06:24:03.515248316Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"SUSE-SU-2017:1832-1","title":"Security update for spice","description":"This update for spice fixes the following issues:\n\n- CVE-2017-7506: A possible buffer overflow via invalid monitor configurations (bsc#1046779)\n","status":"published","published":"2017-07-11T16:03:28Z","modified":"2026-02-04T03:55:44.052146Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:1836-1","title":"Security update for spice","description":"This update for spice fixes the following issues:\n\n- CVE-2017-7506: A possible buffer overflow via invalid monitor configurations (bsc#1046779)\n\n","status":"published","published":"2017-07-11T16:03:37Z","modified":"2026-02-04T02:38:11.650556Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:1837-1","title":"Security update for spice","description":"This update for spice fixes the following issues:\n\n- CVE-2017-7506: A possible buffer overflow via invalid monitor configurations (bsc#1046779)\n","status":"published","published":"2017-07-11T16:03:10Z","modified":"2026-02-04T03:47:16.174421Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:1839-1","title":"Security update for spice","description":"This update for spice fixes the following issues:\n\n- CVE-2017-7506: A possible buffer overflow via invalid monitor configurations (bsc#1046779)\n\n","status":"published","published":"2017-07-11T16:03:18Z","modified":"2026-02-04T03:10:49.208624Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:2552-1","title":"Security update for spice","description":"This update for spice fixes the following security issues:\n\n- CVE-2017-7506: Fixed an out-of-bounds memory access when processing specially\n  crafted messages from authenticated attacker to the spice server resulting into\n  crash and/or server memory leak (bsc#1046779).\n","status":"published","published":"2017-09-22T09:33:19Z","modified":"2026-02-04T03:07:07.414465Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"USN-3355-1","title":"spice vulnerability","description":"Frediano Ziglio discovered that Spice incorrectly handled certain invalid\nmonitor configurations. A remote attacker could use this issue to cause\nSpice to crash, resulting in a denial of service, or possibly execute\narbitrary code.\n","status":"published","published":"2017-07-19T16:50:06Z","modified":"2026-04-22T09:37:43.226403Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}