Red Hat Security AdvisoryRHSA-2013:1474
qspice security update
Released 2013-10-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) qspice-0.3.0-56.el5_10.1, qspice-libs-0.3.0-56.el5_10.1
- Red Hat Enterprise Linux Desktop (v. 5 client) qspice-0.3.0-56.el5_10.1, qspice-libs-0.3.0-56.el5_10.1
- Red Hat Enterprise Linux Desktop Multi OS (v. 5 client) qspice-0.3.0-56.el5_10.1, qspice-libs-devel-0.3.0-56.el5_10.1
- Red Hat Enterprise Linux Virtualization (v. 5 server) qspice-0.3.0-56.el5_10.1, qspice-libs-devel-0.3.0-56.el5_10.1
Fixes 1 record
Priority LOW 28
Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service (crash) via a long password in a SPICE ticket.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0273 · Published 2013-11-02 · Fixed CWE-119
