TI-2018-07706 CVE-2018-10893 · GHSA-5jqv-xfc2-wmwv
Heap-based buffer overflow in Red Hat spice-client
Priority MEDIUM 43
Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames.
RHSA-2019:2229
spice-gtk security and bug fix update
Released 2019-08-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libgovirt-0.3.4-3.el7, spice-glib-0.35-4.el7, spice-gtk-0.35-4.el7 +3
- Red Hat Enterprise Linux Client Optional (v. 7) libgovirt-devel-0.3.4-3.el7, spice-glib-devel-0.35-4.el7, spice-gtk-tools-0.35-4.el7 +2
- Red Hat Enterprise Linux Server (v. 7) libgovirt-0.3.4-3.el7, spice-glib-0.35-4.el7, spice-gtk-0.35-4.el7 +3
- Red Hat Enterprise Linux Server Optional (v. 7) libgovirt-devel-0.3.4-3.el7, spice-glib-0.35-4.el7, spice-glib-devel-0.35-4.el7 +5
- Red Hat Enterprise Linux Workstation (v. 7) libgovirt-0.3.4-3.el7, spice-glib-0.35-4.el7, spice-gtk-0.35-4.el7 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) libgovirt-devel-0.3.4-3.el7, spice-glib-devel-0.35-4.el7, spice-gtk-tools-0.35-4.el7 +2