Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: spice-vdagent — FEDORA-2021-09ce0cdfac Clear all filters
TI-2020-15669 CVE-2020-25652 · GHSA-6rmh-mmff-jmfj

Resource allocation without limits in spice-vdagent

Priority LOW 25

A flaw was found in the spice-vdagentd daemon, where it did not properly handle client connections that can be established via the UNIX domain socket in `/run/spice-vdagentd/spice-vdagent-sock`.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00426 Published 2020-11-26 Partial fix CWE-770
TI-2020-15670 CVE-2020-25653 · GHSA-5v7v-8wfp-pqqp

Race condition in spice-vdagent

Priority LOW 28

A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections.

CVSS 3.1MEDIUM 6.3 Local Low privileges No interaction EPSS 0.00323 Published 2020-11-26 Partial fix CWE-362
TI-2020-15668 CVE-2020-25651 · GHSA-gjj5-vggp-jg8p

Race condition in spice-vdagent

Priority LOW 28

A flaw was found in the SPICE file transfer protocol.

CVSS 3.1MEDIUM 6.4 Local Low privileges No interaction EPSS 0.00292 Published 2020-11-26 Partial fix CWE-362
TI-2020-15667 CVE-2020-25650 · GHSA-f637-jpfq-3wv2

Resource allocation without limits in spice-vdagent

Priority LOW 25

A flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system to the virtual machine.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00488 Published 2020-11-25 Partial fix CWE-770