CVE-2013-4282
Fixed in a distro release EPSS 3%
Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service (crash) via a long password in a SPICE ticket.
Products: spice_project spice, redhat enterprise_virtualization, redhat enterprise_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | spice | 0.12.4-0nocelt2 |
| Debian 13 | spice | 0.12.4-0nocelt2 |
| Debian 14 | spice | 0.12.4-0nocelt2 |
| Debian 7 | spice | 0.11.0-1+deb7u1 |
| Red Hat Enterprise Linux 5 | qspice | 0:0.3.0-56.el5_10.1 |
| Red Hat Enterprise Linux 5 | qspice-debuginfo | 0:0.3.0-56.el5_10.1 |
| Red Hat Enterprise Linux 5 | qspice-libs | 0:0.3.0-56.el5_10.1 |
| Red Hat Enterprise Linux 6 | rhev-hypervisor6 | 0:6.4-20131016.0.el6_4 |
| Red Hat Enterprise Linux 6 | spice-server | 0:0.12.0-12.el6_4.5 |
| Red Hat Enterprise Linux 6 | spice-server-debuginfo | 0:0.12.0-12.el6_4.5 |
| Red Hat Enterprise Linux 6 | spice-server-devel | 0:0.12.0-12.el6_4.5 |
| Red Hat rhel virtualization 5 | qspice | 0:0.3.0-56.el5_10.1 |
| Red Hat rhel virtualization 5 | qspice-debuginfo | 0:0.3.0-56.el5_10.1 |
| Red Hat rhel virtualization 5 | qspice-libs-devel | 0:0.3.0-56.el5_10.1 |
| SUSE Linux Enterprise Desktop 12 | spice | 0.12.4-6.1 |
| SUSE Linux Enterprise Server 12 | spice | 0.12.4-6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | spice | 0.12.4-6.1 |
| SUSE Linux Enterprise Software Development Kit 12 | spice | 0.12.4-6.1 |
| Ubuntu 14.04 LTS | spice | 0.12.4-0nocelt1.1ubuntu1 |
| openSUSE Tumbleweed | spice | 0.15.0-1.3 |