Spice Project vulnerabilities

Products

• Spice 15

Newest

• red hat, inc. spice, redhat enterprise linux +1 more A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote... CVE-2021-20201 Fix available 5.3 MediumMay 18, 2021
• red hat, inc. spice, canonical ubuntu linux, debian linux +7 more +9 more Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the... CVE-2020-14355 Fix available 6.6 MediumOctober 6, 2020
• red hat, inc. spice, canonical ubuntu linux, debian linux +6 more +8 more Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by... CVE-2019-3813 Fix available 7.5 HighJanuary 28, 2019
• red hat spice-client, spice project spice +1 more Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling... CVE-2018-10893 Fix available 7.6 HighAugust 30, 2018
• spice project spice, [unknown] spice:, canonical ubuntu linux +9 more +11 more A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for... CVE-2018-10873 Fix available 8.3 HighAugust 17, 2018
• red hat, inc. spice spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing... CVE-2017-7506 Fix available 8.8 HighJuly 11, 2017
• red hat spice, debian linux, redhat enterprise linux desktop +4 more +6 more A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An... CVE-2016-9578 Fix available 7.5 HighFebruary 6, 2017
• red hat spice, debian linux, redhat enterprise linux desktop +4 more +6 more A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An... CVE-2016-9577 Fix available 7.5 HighDecember 31, 2016
• spice project spice, debian linux, opensuse leap +8 more +10 more SPICE allows local guest OS users to read from or write to arbitrary host memory locations via... CVE-2016-2150 Fix available 7.1 HighJune 6, 2016
• spice project spice, debian linux, opensuse leap +8 more +10 more The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM... CVE-2016-0749 Fix available 9.8 CriticalJune 6, 2016
• spice project spice, canonical ubuntu linux, debian linux +6 more +8 more Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to... CVE-2015-5261 Fix available 7.1 HighOctober 6, 2015
• spice project spice, canonical ubuntu linux, debian linux +6 more +8 more Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of... CVE-2015-5260 Fix available 7.8 HighSeptember 8, 2015
• spice project spice, redhat enterprise linux, enterprise linux desktop +3 more +5 more Race condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote... CVE-2015-3247 Fix available 6.9 MediumSeptember 3, 2015
• spice project spice, redhat enterprise linux, enterprise virtualization +2 more Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0... CVE-2013-4282 Fix available 5.0 MediumNovember 2, 2013
• spice project spice, canonical ubuntu linux +1 more The (1) red_channel_pipes_add_type and (2) red_channel_pipes_add_empty_msg functions in server... CVE-2013-4130 Fix available 5.0 MediumJuly 15, 2013