Red Hat Security AdvisoryRHSA-2013:1473
spice-server security update
Released 2013-10-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) spice-server-0.12.0-12.el6_4.5
- Red Hat Enterprise Linux Desktop Optional (v. 6) spice-server-0.12.0-12.el6_4.5, spice-server-devel-0.12.0-12.el6_4.5
- Red Hat Enterprise Linux HPC Node (v. 6) spice-server-0.12.0-12.el6_4.5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) spice-server-0.12.0-12.el6_4.5, spice-server-devel-0.12.0-12.el6_4.5
- Red Hat Enterprise Linux Server (v. 6) spice-server-0.12.0-12.el6_4.5
- Red Hat Enterprise Linux Server Optional (v. 6) spice-server-0.12.0-12.el6_4.5, spice-server-devel-0.12.0-12.el6_4.5
- Red Hat Enterprise Linux Workstation (v. 6) spice-server-0.12.0-12.el6_4.5
- Red Hat Enterprise Linux Workstation Optional (v. 6) spice-server-0.12.0-12.el6_4.5, spice-server-devel-0.12.0-12.el6_4.5
Fixes 1 record
Priority LOW 28
Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service (crash) via a long password in a SPICE ticket.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0273 · Published 2013-11-02 · Fixed CWE-119
