Red Hat Security AdvisoryRHSA-2015:1714
spice security update
Released 2015-09-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) spice-0.12.4-9.el7_1.1, spice-server-0.12.4-9.el7_1.1
- Red Hat Enterprise Linux Client Optional (v. 7) spice-server-devel-0.12.4-9.el7_1.1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) spice-0.12.4-9.el7_1.1, spice-server-0.12.4-9.el7_1.1, spice-server-devel-0.12.4-9.el7_1.1
- Red Hat Enterprise Linux Server (v. 7) spice-0.12.4-9.el7_1.1, spice-server-0.12.4-9.el7_1.1
- Red Hat Enterprise Linux Server Optional (v. 7) spice-server-devel-0.12.4-9.el7_1.1
- Red Hat Enterprise Linux Workstation (v. 7) spice-0.12.4-9.el7_1.1, spice-server-0.12.4-9.el7_1.1
- Red Hat Enterprise Linux Workstation Optional (v. 7) spice-server-devel-0.12.4-9.el7_1.1
Fixes 1 record
Priority LOW 33
Race condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote authenticated guest user to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arb…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.01144 · Published 2015-09-08 · Fixed CWE-119
