{"id":"CVE-2018-10873","aliases":["ALPINE-CVE-2018-10873","BELL-CVE-2018-10873","DEBIAN-CVE-2018-10873","DLA-1486-1","DLA-1489-1","DSA-4319-1","EUVD-2018-2939","GHSA-2r4x-v526-vv9j","MGASA-2019-0099","MGASA-2019-0100","RHSA-2018:2731","RHSA-2018:2732","RHSA-2018:3470","SUSE-SU-2018:2563-1","SUSE-SU-2018:2566-1","SUSE-SU-2018:2584-1","SUSE-SU-2018:2593-1","SUSE-SU-2018:2594-1","SUSE-SU-2018:2595-1","SUSE-SU-2018:2709-1","SUSE-SU-2020:3841-1","SUSE-SU-2020:3842-1","UBUNTU-CVE-2018-10873","USN-3751-1","openSUSE-SU-2024:11397-1","openSUSE-SU-2024:11398-1"],"status":"published","title":"A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for...","description":"A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts.","severity":{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.03934,"percentile":0.90458,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-20"],"published":"2018-08-17T00:00:00Z","modified":"2026-10-24T14:20:17Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"spice","fixed_in":["0.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"spice","fixed_in":["0.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"spice","fixed_in":["0.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"spice","fixed_in":["0.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"spice","fixed_in":["0.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"spice","fixed_in":["0.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"spice","fixed_in":["0.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"spice","fixed_in":["0.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"spice","fixed_in":["0.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"spice","fixed_in":["0.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"spice","fixed_in":["0.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"spice","fixed_in":["0.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"spice","fixed_in":["0.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"spice","fixed_in":["0.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"spice","fixed_in":["0.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"spice","fixed_in":["0.12.8-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"spice","fixed_in":["0.13.3-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"spice","fixed_in":["0.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"spice","fixed_in":["0.14.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"spice","fixed_in":["0.14.1-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"spice","fixed_in":["0.14.0-1.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"spice","fixed_in":["0.14.0-1.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"spice","fixed_in":["0.14.0-1.1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"spice-gtk","fixed_in":["0.35-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"spice-gtk","fixed_in":["0.35-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"spice-gtk","fixed_in":["0.35-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"spice","fixed_in":["0.12.5-1+deb8u6"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"spice-gtk","fixed_in":["0.25-1+deb8u1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"spice","fixed_in":["0.12.8-2.1+deb9u2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice","fixed_in":["0:0.14.0-2.el7_5.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-debuginfo","fixed_in":["0:0.14.0-2.el7_5.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-glib","fixed_in":["0:0.34-3.el7_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-gtk","fixed_in":["0:0.34-3.el7_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-gtk-debuginfo","fixed_in":["0:0.34-3.el7_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-gtk3","fixed_in":["0:0.34-3.el7_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-server","fixed_in":["0:0.14.0-2.el7_5.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-glib-devel","fixed_in":["0:0.34-3.el7_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-gtk-tools","fixed_in":["0:0.34-3.el7_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-gtk3-devel","fixed_in":["0:0.34-3.el7_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-gtk3-vala","fixed_in":["0:0.34-3.el7_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-server-devel","fixed_in":["0:0.14.0-2.el7_5.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"spice","fixed_in":["0:0.14.0-2.el7_5.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"spice-debuginfo","fixed_in":["0:0.14.0-2.el7_5.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"spice-server","fixed_in":["0:0.14.0-2.el7_5.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"spice-server-devel","fixed_in":["0:0.14.0-2.el7_5.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice","fixed_in":["0:0.14.0-2.el7_5.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-debuginfo","fixed_in":["0:0.14.0-2.el7_5.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-glib","fixed_in":["0:0.34-3.el7_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-gtk","fixed_in":["0:0.34-3.el7_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-gtk-debuginfo","fixed_in":["0:0.34-3.el7_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-gtk3","fixed_in":["0:0.34-3.el7_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-server","fixed_in":["0:0.14.0-2.el7_5.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-glib-devel","fixed_in":["0:0.34-3.el7_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-gtk-tools","fixed_in":["0:0.34-3.el7_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-gtk3-devel","fixed_in":["0:0.34-3.el7_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-gtk3-vala","fixed_in":["0:0.34-3.el7_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-server-devel","fixed_in":["0:0.14.0-2.el7_5.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice","fixed_in":["0:0.14.0-2.el7_5.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-debuginfo","fixed_in":["0:0.14.0-2.el7_5.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-glib","fixed_in":["0:0.34-3.el7_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-gtk","fixed_in":["0:0.34-3.el7_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-gtk-debuginfo","fixed_in":["0:0.34-3.el7_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-gtk3","fixed_in":["0:0.34-3.el7_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-server","fixed_in":["0:0.14.0-2.el7_5.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-glib-devel","fixed_in":["0:0.34-3.el7_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-gtk-tools","fixed_in":["0:0.34-3.el7_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-gtk3-devel","fixed_in":["0:0.34-3.el7_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-gtk3-vala","fixed_in":["0:0.34-3.el7_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-server-devel","fixed_in":["0:0.14.0-2.el7_5.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-glib","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-gtk","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-gtk-debuginfo","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-gtk-python","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-server","fixed_in":["0:0.12.4-16.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-server-debuginfo","fixed_in":["0:0.12.4-16.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-glib-devel","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-gtk-devel","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-gtk-tools","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-server-devel","fixed_in":["0:0.12.4-16.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-glib","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-gtk","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-gtk-debuginfo","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-gtk-python","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-server","fixed_in":["0:0.12.4-16.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-server-debuginfo","fixed_in":["0:0.12.4-16.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-glib-devel","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-gtk-devel","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-gtk-tools","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-server-devel","fixed_in":["0:0.12.4-16.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-glib","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-gtk","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-gtk-debuginfo","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-gtk-python","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-server","fixed_in":["0:0.12.4-16.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-server-debuginfo","fixed_in":["0:0.12.4-16.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-glib-devel","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-gtk-devel","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-gtk-tools","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-server-devel","fixed_in":["0:0.12.4-16.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-glib","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-gtk","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-gtk-debuginfo","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-gtk-python","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-server","fixed_in":["0:0.12.4-16.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-server-debuginfo","fixed_in":["0:0.12.4-16.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-glib-devel","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-gtk-devel","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-gtk-tools","fixed_in":["0:0.26-8.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-server-devel","fixed_in":["0:0.12.4-16.el6_10.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"spice","fixed_in":["0.12.4-0nocelt2ubuntu1.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"spice-protocol","fixed_in":["0.12.10-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"spice","fixed_in":["0.14.0-1ubuntu2.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.3-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-1.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-1.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-1.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.5-1+deb8u6"}]}],"versions":["0.12.5-1","0.12.5-1+deb8u1","0.12.5-1+deb8u2","0.12.5-1+deb8u3","0.12.5-1+deb8u4","0.12.5-1+deb8u5"]},{"source":"osv","ecosystem":"Debian:8","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25-1+deb8u1"}]}],"versions":["0.25-1"]},{"source":"osv","ecosystem":"Debian:9","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-2.1+deb9u2"}]}],"versions":["0.12.8-2.1","0.12.8-2.1+deb9u1"]},{"source":"osv","ecosystem":"Mageia:6","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.33-3.1.mga6"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:6","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.90-1.2.mga6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.0-2.el7_5.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.0-2.el7_5.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-3.el7_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-3.el7_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-3.el7_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-3.el7_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.0-2.el7_5.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-3.el7_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-gtk-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-3.el7_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-3.el7_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-gtk3-vala","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-3.el7_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"spice-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.0-2.el7_5.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.0-2.el7_5.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"spice-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.0-2.el7_5.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"spice-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.0-2.el7_5.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"spice-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.0-2.el7_5.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.0-2.el7_5.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.0-2.el7_5.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-3.el7_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-3.el7_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-3.el7_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-3.el7_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.0-2.el7_5.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-3.el7_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-gtk-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-3.el7_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-3.el7_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-gtk3-vala","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-3.el7_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"spice-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.0-2.el7_5.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.0-2.el7_5.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.0-2.el7_5.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-3.el7_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-3.el7_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-3.el7_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-3.el7_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.0-2.el7_5.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-3.el7_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-gtk-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-3.el7_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-3.el7_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-gtk3-vala","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-3.el7_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"spice-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.0-2.el7_5.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-gtk-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.4-16.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.4-16.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-gtk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-gtk-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.4-16.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-gtk-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.4-16.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.4-16.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-gtk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-gtk-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.4-16.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-gtk-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.4-16.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.4-16.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-gtk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-gtk-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.4-16.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-gtk-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.4-16.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.4-16.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-gtk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-gtk-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26-8.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.4-16.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2-20181026.0.el7_6"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host-image-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2-20181026.0.el7_6"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"imgbased","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.29-1.el7ev"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"python-imgbased","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.29-1.el7ev"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-release-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2-7.3.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host-image-update-placeholder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2-7.3.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.4-15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.4-15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.4-15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-4.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.4-8.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25-5.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.33-3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.33-3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.33-3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.33-3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.8-6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.31-9.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.31-9.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.31-9.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.31-9.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.7-10.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.7-10.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.7-10.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.7-10.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.4-0nocelt2ubuntu1.7"}]}],"versions":["0.12.4-0nocelt1","0.12.4-0nocelt1.1","0.12.4-0nocelt1.1ubuntu1","0.12.4-0nocelt2","0.12.4-0nocelt2ubuntu1","0.12.4-0nocelt2ubuntu1.1","0.12.4-0nocelt2ubuntu1.2","0.12.4-0nocelt2ubuntu1.3","0.12.4-0nocelt2ubuntu1.4","0.12.4-0nocelt2ubuntu1.5","0.12.4-0nocelt2ubuntu1.6"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"spice-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.10-1ubuntu0.2"}]}],"versions":["0.12.7-1","0.12.10-1","0.12.10-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.28-1ubuntu1","0.29-1","0.30-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-1ubuntu2.2"}]}],"versions":["0.12.8-2.2","0.14.0-1","0.14.0-1ubuntu1","0.14.0-1ubuntu2","0.14.0-1ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.33-3.3","0.34-1.1","0.34-1.1build1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.4-0nocelt2ubuntu1.7"}]}],"versions":["0.12.4-0nocelt1","0.12.4-0nocelt1.1","0.12.4-0nocelt1.1ubuntu1","0.12.4-0nocelt2","0.12.4-0nocelt2ubuntu1","0.12.4-0nocelt2ubuntu1.1","0.12.4-0nocelt2ubuntu1.2","0.12.4-0nocelt2ubuntu1.3","0.12.4-0nocelt2ubuntu1.4","0.12.4-0nocelt2ubuntu1.5","0.12.4-0nocelt2ubuntu1.6"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"spice-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.10-1ubuntu0.2"}]}],"versions":["0.12.7-1","0.12.10-1","0.12.10-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-1ubuntu2.2"}]}],"versions":["0.12.8-2.2","0.14.0-1","0.14.0-1ubuntu1","0.14.0-1ubuntu2","0.14.0-1ubuntu2.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"spice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.0-1.3"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.39-1.8"}]}],"bundled":3}],"products":[{"vendor":"[unknown]","product":"spice:"},{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_eus"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"redhat","product":"virtualization"},{"vendor":"redhat","product":"virtualization_host"},{"vendor":"spice_project","product":"spice"}],"references":[{"url":"https://www.debian.org/security/2018/dsa-4319","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/08/msg00035.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/3751-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2732","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/08/msg00037.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10873","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2731","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3470","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/08/msg00038.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/105152","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://gitlab.freedesktop.org/spice/spice-common/commit/bb15d4815ab586b4c4a20f4a565970a44824c42c","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10873","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-2r4x-v526-vv9j"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-10873","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2018-10873","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-10873","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0099.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23466","tags":["report"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-04/msg00011.html","tags":["web"]},{"url":"https://usn.ubuntu.com/3659-1/","tags":["web"]},{"url":"http://openwall.com/lists/oss-security/2018/08/17/1","tags":["web"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-09/msg00007.html","tags":["web"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-09/msg00010.html","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2019-0100.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24257","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2019/01/28/2","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0231","tags":["web"]},{"url":"https://usn.ubuntu.com/3870-1/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/OWH2AHGKTPR5QUGXUYGY6CAEI3O7RPLL/","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1596008","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2731.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10873","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10873","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2732.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1501276","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1593731","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601657","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1607617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1607618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610659","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612659","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612660","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612805","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613143","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613231","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614971","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619590","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1624453","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626960","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631576","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632585","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632974","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1633431","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1635926","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1635929","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636880","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3470.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10858","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10858","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10858","tags":["advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2018-10858.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10904","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10904","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10904","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10907","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10907","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10907","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10911","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10911","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10911","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10913","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10913","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10913","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10914","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10914","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10914","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10923","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10923","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10923","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10926","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10926","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10926","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10927","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10927","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10927","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10928","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10928","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10928","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10929","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10929","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10929","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10930","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10930","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10930","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14652","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14652","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14652","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14653","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14653","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14653","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14654","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14654","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14654","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14659","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14659","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14659","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14660","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14660","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14660","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14661","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14661","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14661","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1000805","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1637263","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000805","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000805","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182563-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1101295","tags":["report"]},{"url":"https://bugzilla.suse.com/1104448","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10893","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182566-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182584-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182593-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182594-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182595-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182709-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1101420","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203841-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203842-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-10873","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3751-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14355","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-10873","description":"A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts.","status":"published","published":"2018-08-17T12:00:00Z","modified":"2024-08-05T07:46:47.325Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:35:01.619448Z"}],"euvd":[{"id":"EUVD-2018-2939","description":"A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts.","status":"published","published":"2018-08-17T12:00:00Z","modified":"2024-08-05T07:46:47Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H","level":"high"}],"updated_at":"2026-11-03T02:39:57.544825Z"}],"ghsa":[{"id":"GHSA-2r4x-v526-vv9j","title":"A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for...","description":"A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts.","status":"published","published":"2022-05-13T01:34:55Z","modified":"2023-02-01T05:08:33Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:50:47.846536Z"}],"nvd":[{"id":"CVE-2018-10873","description":"A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts.","status":"published","published":"2018-08-17T12:29:00.253Z","modified":"2026-06-17T01:34:48.71Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H","level":"high","assessor":"secondary"},{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119","CWE-20"],"updated_at":"2026-11-02T14:04:36.842579Z"}],"osv":[{"id":"ALPINE-CVE-2018-10873","description":"A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts.","status":"published","published":"2018-08-17T12:29:00.253Z","modified":"2026-10-23T17:17:55.200038022Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"BELL-CVE-2018-10873","title":"CVE-2018-10873 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:16.465637Z","modified":"2026-01-26T09:48:55.362356Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:14.701973Z"},{"id":"CVE-2018-10873","description":"A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts.","status":"published","published":"2018-08-17T12:29:00.253Z","modified":"2026-10-24T14:20:17.396931302Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:07.641418Z"},{"id":"DEBIAN-CVE-2018-10873","description":"A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts.","status":"published","published":"2018-08-17T12:29:00.253Z","modified":"2026-10-23T18:03:18.349356351Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"RHSA-2018:2731","title":"Red Hat Security Advisory: spice and spice-gtk security update","status":"published","published":"2024-09-16T01:44:07Z","modified":"2026-07-01T10:04:32Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2018:2732","title":"Red Hat Security Advisory: spice-gtk and spice-server security update","status":"published","published":"2024-09-16T01:44:13Z","modified":"2026-07-01T10:04:32Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2018:3470","title":"Red Hat Security Advisory: Red Hat Virtualization security and bug fix update","status":"published","published":"2024-09-22T16:32:38Z","modified":"2026-07-01T10:05:01Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"UBUNTU-CVE-2018-10873","description":"A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts.","status":"published","published":"2018-08-17T00:00:00Z","modified":"2026-04-22T11:40:43.351494Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H","level":"high"},{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:16.544091Z"},{"id":"DLA-1486-1","title":"spice - security update","status":"published","published":"2018-08-31T00:00:00Z","modified":"2026-03-09T01:02:03.057414Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DLA-1489-1","title":"spice-gtk - security update","status":"published","published":"2018-09-01T00:00:00Z","modified":"2026-03-09T01:01:03.469018Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-4319-1","title":"spice - security update","status":"published","published":"2018-10-15T00:00:00Z","modified":"2026-03-09T02:11:19.328037Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2019-0099","title":"Updated spice-gtk packages fix security vulnerability","description":"A flaw was found in the way spice-client processed certain messages sent\nfrom the server. An attacker, having control of malicious spice-server,\ncould use this flaw to crash the client or execute arbitrary code with\npermissions of the user running the client. spice-gtk versions through\n0.34 are believed to be vulnerable. (CVE-2017-12194)\n\nA vulnerability was discovered in SPICE before version 0.14.1 where the\ngenerated code used for demarshalling messages lacked sufficient bounds\nchecks. A malicious client or server, after authentication, could send\nspecially crafted messages to its peer which would result in a crash or,\npotentially, other impacts. (CVE-2018-10873)\n\nMultiple integer overflow and buffer overflow issues were discovered in\nspice-client's handling of LZ compressed frames. A malicious server could\ncause the client to crash or, potentially, execute arbitrary code.\n(CVE-2018-10893)\n","status":"published","published":"2019-02-22T01:08:50Z","modified":"2026-04-16T06:24:27.47352203Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"MGASA-2019-0100","title":"Updated spice packages fix security vulnerability","description":"Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds\nread due to an off-by-one error in memslot_get_virt. This may lead to a\ndenial of service, or, in the worst case, code-execution by unauthenticated\nattackers. (CVE-2019-3813)\n\nA vulnerability was discovered in SPICE before version 0.14.1 where the\ngenerated code used for demarshalling messages lacked sufficient bounds\nchecks. A malicious client or server, after authentication, could send\nspecially crafted messages to its peer which would result in a crash or,\npotentially, other impacts. (CVE-2018-10873)\n\nMultiple integer overflow and buffer overflow issues were discovered in\nspice-client's handling of LZ compressed frames. A malicious server could\ncause the client to crash or, potentially, execute arbitrary code.\n(CVE-2018-10893)\n","status":"published","published":"2019-02-22T00:35:50Z","modified":"2026-04-16T04:42:44.888806413Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2024:11397-1","title":"libspice-server-devel-0.15.0-1.3 on GA media","description":"These are all security issues fixed in the libspice-server-devel-0.15.0-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:32:43.188907Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11398-1","title":"libspice-client-glib-2_0-8-0.39-1.8 on GA media","description":"These are all security issues fixed in the libspice-client-glib-2_0-8-0.39-1.8 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:51:49.620601Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2018:2563-1","title":"Security update for spice","description":"This update for spice fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-10873: Fix potential heap corruption when demarshalling (bsc#1104448)\n- CVE-2018-10893: Avoid buffer overflow on image lz checks (bsc#1101295)\n","status":"published","published":"2018-08-30T14:10:34Z","modified":"2026-02-04T03:40:59.806815Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:2566-1","title":"Security update for spice","description":"This update for spice fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-10873: Fix potential heap corruption when demarshalling (bsc#1104448)\n- CVE-2018-10893: Avoid buffer overflow on image lz checks (bsc#1101295)\n","status":"published","published":"2018-08-30T18:20:17Z","modified":"2026-02-04T02:38:06.894833Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:2584-1","title":"Security update for spice","description":"This update for spice fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-10873: Fix potential heap corruption when demarshalling (bsc#1104448)\n- CVE-2018-10893: Avoid buffer overflow on image lz checks (bsc#1101295)\n","status":"published","published":"2018-08-31T13:18:11Z","modified":"2026-02-04T03:41:06.275366Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:2593-1","title":"Security update for spice-gtk","description":"This update for spice-gtk fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-10873: Fix potential heap corruption when demarshalling (bsc#1104448)\n- CVE-2018-10893: Avoid buffer overflow on image lz checks (bsc#1101295)\n","status":"published","published":"2018-09-03T14:55:03Z","modified":"2026-02-04T04:38:41.814809Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:2594-1","title":"Security update for spice-gtk","description":"This update for spice-gtk fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-10873: Fix potential heap corruption when demarshalling (bsc#1104448)\n- CVE-2018-10893: Avoid buffer overflow on image lz checks (bsc#1101295)\n\n","status":"published","published":"2018-09-03T14:01:45Z","modified":"2026-02-04T03:08:20.272998Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:2595-1","title":"Security update for spice","description":"This update for spice fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-10873: Fix potential heap corruption when demarshalling (bsc#1104448)\n- CVE-2018-10893: Avoid buffer overflow on image lz checks (bsc#1101295)\n  ","status":"published","published":"2018-09-03T14:02:05Z","modified":"2026-02-04T03:46:19.037843Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:2709-1","title":"Security update for spice-gtk","description":"This update for spice-gtk fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-10873: Fix potential heap corruption when demarshalling (bsc#1104448)\n- CVE-2018-10893: Avoid buffer overflow on image lz checks (bsc#1101295)\n\nOther bugs fixed:\n\n- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)\n","status":"published","published":"2018-09-13T20:40:42Z","modified":"2026-02-04T03:07:49.471603Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2020:3841-1","title":"Security update for spice-gtk","description":"This update for spice-gtk fixes the following issues:\n\n- CVE-2018-10873: Fixed a potential heap corruption when demarshalling (bsc#1104448)\n- CVE-2018-10893: Fixed a buffer overflow on image lz checks (bsc#1101295)\t  \n","status":"published","published":"2020-12-16T09:41:02Z","modified":"2026-02-04T04:20:31.322625Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2020:3842-1","title":"Security update for spice","description":"This update for spice fixes the following issues:\n\n- CVE-2018-10873: Fixed a potential heap corruption when demarshalling (bsc#1104448)\n- CVE-2018-10893: Fixed a buffer overflow on image lz checks (bsc#1101295)\t  \n","status":"published","published":"2020-12-16T09:41:25Z","modified":"2026-02-04T03:16:52.148498Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"USN-3751-1","title":"spice, spice-protocol vulnerability","description":"It was discovered that Spice incorrectly handled certain messages.\nAn attacker could possibly use this issue to cause a denial of service.\n","status":"published","published":"2018-08-22T17:43:13Z","modified":"2026-04-27T15:22:29.526835Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}