Vulnerabilities

TI-2026-41731 CVE-2026-57966 · GHSA-gg66-359m-pmcc

Spice-vdagent: path traversal in file transfer via unsanitized filename

LOW 19

A path traversal vulnerability was found in spice-vdagent.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00126 Published 2026-06-29 Fix deferred CWE-22

TI-2026-41730 CVE-2026-57965 · GHSA-54pp-f5wh-29jc

Spice-vdagent: integer overflow in udscs_write() leading to heap buffer overflow

LOW 22

A flaw was found in spice-vdagent.

CVSS 3.1MEDIUM 5.1 Local High privileges No interaction EPSS 0.00113 Published 2026-06-29 Fix deferred CWE-190

TI-2020-14673 CVE-2020-23793 · GHSA-76gg-j5fc-hc83

An issue was discovered in spice-server spice-server-0.14.0-6.el7_6.1.x86_64 of Redhat's…

HIGH 76

An issue was discovered in spice-server spice-server-0.14.0-6.el7_6.1.x86_64 of Redhat's VDI product.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00842 Published 2023-08-22 Will not fix CWE-862

TI-2021-02634 CVE-2021-3700 · GHSA-9885-wxqj-48q7

Use after free in usbredir

LOW 28

A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c.

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00314 Published 2022-02-24 Fix deferred CWE-416

TI-2020-15669 CVE-2020-25652 · GHSA-6rmh-mmff-jmfj

Resource allocation without limits in spice-vdagent

LOW 25

A flaw was found in the spice-vdagentd daemon, where it did not properly handle client connections that can be established via the UNIX domain socket in `/run/spice-vdagentd/spice-vdagent-sock`.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00426 Published 2020-11-26 Partial fix CWE-770

TI-2020-15670 CVE-2020-25653 · GHSA-5v7v-8wfp-pqqp

Race condition in spice-vdagent

LOW 28

A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections.

CVSS 3.1MEDIUM 6.3 Local Low privileges No interaction EPSS 0.00323 Published 2020-11-26 Partial fix CWE-362

TI-2020-15668 CVE-2020-25651 · GHSA-gjj5-vggp-jg8p

Race condition in spice-vdagent

LOW 28

A flaw was found in the SPICE file transfer protocol.

CVSS 3.1MEDIUM 6.4 Local Low privileges No interaction EPSS 0.00292 Published 2020-11-26 Partial fix CWE-362

TI-2020-15667 CVE-2020-25650 · GHSA-f637-jpfq-3wv2

Resource allocation without limits in spice-vdagent

LOW 25

A flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system to the virtual machine.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00488 Published 2020-11-25 Partial fix CWE-770

TI-2017-11081 CVE-2017-15108 · GHSA-rx22-vq3w-89rg

OS command injection in Red Hat spice-vdagent

LOW 34

spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to inject arbitrary commands to be executed.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00419 Published 2018-01-20 Will not fix CWE-78

Vulnerabilities

Filters