Red Hat Security AdvisoryRHSA-2017:0253
spice-server security update
Released 2017-02-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) spice-server-0.12.4-13.el6_8.2
- Red Hat Enterprise Linux Desktop Optional (v. 6) spice-server-devel-0.12.4-13.el6_8.2
- Red Hat Enterprise Linux HPC Node (v. 6) spice-server-0.12.4-13.el6_8.2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) spice-server-devel-0.12.4-13.el6_8.2
- Red Hat Enterprise Linux Server (v. 6) spice-server-0.12.4-13.el6_8.2
- Red Hat Enterprise Linux Server Optional (v. 6) spice-server-devel-0.12.4-13.el6_8.2
- Red Hat Enterprise Linux Workstation (v. 6) spice-server-0.12.4-13.el6_8.2
- Red Hat Enterprise Linux Workstation Optional (v. 6) spice-server-devel-0.12.4-13.el6_8.2
Fixes 2 records
Priority MEDIUM 45
A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03795 · Published 2018-07-27 · Partial fix CWE-122
Priority LOW 38
A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.0246 · Published 2018-07-27 · Partial fix CWE-20