Read the docs
Red Hat Security Advisory

RHSA-2020:0471

spice-gtk security update

Released 2020-02-11 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

Priority MEDIUM 43

Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02363 Published 2018-09-11 Partial fix CWE-122