spice-client-win vulnerabilities (Red Hat)
17 vulnerabilities.
-
spice-client-winRed Hat Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response 8.6 High -
spice-client-winRed Hat Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication 8.6 High -
spice-client-winRed Hat Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins) 8.2 High -
spice-client-winRed Hat Libtiff: libtiff write-what-where 8.8 High -
spice-client-winRed Hat libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a... 7.5 High -
spice-client-winRed Hat LibTIFF tiffmedian.c get_histogram use after free 4.8 Medium -
spice-client-winRed Hat Integer Truncation on SQLite 7.2 High -
spice-client-winRed Hat Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value 9.0 Critical -
spice-client-winRed Hat Libsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an unauthorized response with di… 6.5 Medium -
spice-client-winRed Hat Libsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c 5.3 Medium -
spice-client-winRed Hat Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header 5.3 Medium -
spice-client-winRed Hat Libsoup: out of bounds reads in soup_headers_parse_request() 7.5 High -
spice-client-winRed Hat Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header 7.5 High -
spice-client-winRed Hat Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() 6.5 Medium -
spice-client-winRed Hat Libsoup: heap buffer overflow in sniff_unknown() 6.5 Medium -
spice-client-winRed Hat Libsoup: integer overflow in append_param_quoted 5.9 Medium -
spice-client-winRed Hat An out of bounds write exists in FreeType versions 2.13.0 and below when attempting to parse font... 8.1 High