Red Hat Security AdvisoryRHSA-2013:1192
spice-server security update
Released 2013-09-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) spice-server-0.12.0-12.el6_4.3
- Red Hat Enterprise Linux Desktop Optional (v. 6) spice-server-0.12.0-12.el6_4.3, spice-server-devel-0.12.0-12.el6_4.3
- Red Hat Enterprise Linux HPC Node (v. 6) spice-server-0.12.0-12.el6_4.3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) spice-server-0.12.0-12.el6_4.3, spice-server-devel-0.12.0-12.el6_4.3
- Red Hat Enterprise Linux Server (v. 6) spice-server-0.12.0-12.el6_4.3
- Red Hat Enterprise Linux Server Optional (v. 6) spice-server-0.12.0-12.el6_4.3, spice-server-devel-0.12.0-12.el6_4.3
- Red Hat Enterprise Linux Workstation (v. 6) spice-server-0.12.0-12.el6_4.3
- Red Hat Enterprise Linux Workstation Optional (v. 6) spice-server-0.12.0-12.el6_4.3, spice-server-devel-0.12.0-12.el6_4.3
Fixes 1 record
Priority LOW 28
The (1) red_channel_pipes_add_type and (2) red_channel_pipes_add_empty_msg functions in server/red_channel.c in SPICE before 0.12.4 do not properly perform ring loops, which might allow remote attackers to cause a denial…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02629 · Published 2013-08-20 · Fixed CWE-399
