Read the docs
Red Hat Security Advisory

RHSA-2021:1791

spice-vdagent security and bug fix update

Released 2021-05-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 4 records

TI-2020-15670 CVE-2020-25653 · GHSA-5v7v-8wfp-pqqp

Race condition in spice-vdagent

Priority LOW 28

A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections.

CVSS 3.1MEDIUM 6.3 Local Low privileges No interaction EPSS 0.0033 Published 2020-11-26 Partial fix CWE-362
TI-2020-15668 CVE-2020-25651 · GHSA-gjj5-vggp-jg8p

Race condition in spice-vdagent

Priority LOW 28

A flaw was found in the SPICE file transfer protocol.

CVSS 3.1MEDIUM 6.4 Local Low privileges No interaction EPSS 0.00299 Published 2020-11-26 Partial fix CWE-362
TI-2020-15669 CVE-2020-25652 · GHSA-6rmh-mmff-jmfj

Resource allocation without limits in spice-vdagent

Priority LOW 25

A flaw was found in the spice-vdagentd daemon, where it did not properly handle client connections that can be established via the UNIX domain socket in `/run/spice-vdagentd/spice-vdagent-sock`.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00436 Published 2020-11-26 Partial fix CWE-770
TI-2020-15667 CVE-2020-25650 · GHSA-f637-jpfq-3wv2

Resource allocation without limits in spice-vdagent

Priority LOW 25

A flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system to the virtual machine.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.005 Published 2020-11-25 Partial fix CWE-770