Red Hat Security AdvisoryRHSA-2018:2731
spice and spice-gtk security update
Released 2018-09-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) spice-0.14.0-2.el7_5.5, spice-glib-0.34-3.el7_5.2, spice-gtk-0.34-3.el7_5.2 +2
- Red Hat Enterprise Linux Client Optional (v. 7) spice-glib-devel-0.34-3.el7_5.2, spice-gtk-tools-0.34-3.el7_5.2, spice-gtk3-devel-0.34-3.el7_5.2 +2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) spice-0.14.0-2.el7_5.5, spice-server-0.14.0-2.el7_5.5, spice-server-devel-0.14.0-2.el7_5.5
- Red Hat Enterprise Linux Server (v. 7) spice-0.14.0-2.el7_5.5, spice-glib-0.34-3.el7_5.2, spice-gtk-0.34-3.el7_5.2 +2
- Red Hat Enterprise Linux Server Optional (v. 7) spice-glib-0.34-3.el7_5.2, spice-glib-devel-0.34-3.el7_5.2, spice-gtk-0.34-3.el7_5.2 +5
- Red Hat Enterprise Linux Workstation (v. 7) spice-0.14.0-2.el7_5.5, spice-glib-0.34-3.el7_5.2, spice-gtk-0.34-3.el7_5.2 +2
- Red Hat Enterprise Linux Workstation Optional (v. 7) spice-glib-devel-0.34-3.el7_5.2, spice-gtk-tools-0.34-3.el7_5.2, spice-gtk3-devel-0.34-3.el7_5.2 +2
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) spice-glib-0.34-3.el7_5.2, spice-gtk-0.34-3.el7_5.2, spice-gtk3-0.34-3.el7_5.2
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) spice-glib-0.34-3.el7_5.2, spice-glib-devel-0.34-3.el7_5.2, spice-gtk-0.34-3.el7_5.2 +4
Fixes 1 record
Priority MEDIUM 45
A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03934 · Published 2018-08-17 · Fixed CWE-119
