Spice-gtk Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Spice-gtk Project records in CISA KEV

No Spice-gtk Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Spice-gtk 3 records MEDIUM

Records

3 records

TI-2017-08984 CVE-2017-12194 · GHSA-r5rv-8pm6-w5ch

Stack-based buffer overflow in [freedesktop.org] spice-gtk

MEDIUM 50

A flaw was found in the way spice-client processed certain messages sent from the server.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.05249 Published 2018-03-14 Will not fix CWE-121

TI-2016-02566 CVE-2016-3066 · GHSA-v6jf-mqxh-2r3v

The spice-gtk widget allows remote authenticated users to obtain information from the host clipboard.

LOW 31

The spice-gtk widget allows remote authenticated users to obtain information from the host clipboard.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01022 Published 2017-06-06 Will not fix CWE-200

TI-2013-03788 CVE-2013-4324 · GHSA-4qg9-qqgj-hw85

spice-gtk 0.14, and possibly other versions, invokes the polkit authority using the…

LOW 21

spice-gtk 0.14, and possibly other versions, invokes the polkit authority using the insecure polkit_unix_process_new API function, which allows local users to bypass intended access restrictions by leveraging a PolkitUni…

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00384 Published 2013-10-03 Fixed CWE-264

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0