Red Hat Security AdvisoryRHSA-2015:1715
spice-server security update
Released 2015-09-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) spice-server-0.12.4-12.el6_7.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) spice-server-devel-0.12.4-12.el6_7.1
- Red Hat Enterprise Linux HPC Node (v. 6) spice-server-0.12.4-12.el6_7.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) spice-server-devel-0.12.4-12.el6_7.1
- Red Hat Enterprise Linux Server (v. 6) spice-server-0.12.4-12.el6_7.1
- Red Hat Enterprise Linux Server Optional (v. 6) spice-server-devel-0.12.4-12.el6_7.1
- Red Hat Enterprise Linux Workstation (v. 6) spice-server-0.12.4-12.el6_7.1
- Red Hat Enterprise Linux Workstation Optional (v. 6) spice-server-devel-0.12.4-12.el6_7.1
Fixes 1 record
Priority LOW 33
Race condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote authenticated guest user to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arb…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.01144 · Published 2015-09-08 · Fixed CWE-119
