CVE-2018-10873
Fixed in a distro release EPSS 4%CVSS 8.3
A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts.
Products: spice_project spice, debian_linux, canonical ubuntu_linux, redhat virtualization, redhat virtualization_host, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | spice | 0.14.1-r0 |
| Alpine 3.11 | spice | 0.14.1-r0 |
| Alpine 3.12 | spice | 0.14.1-r0 |
| Alpine 3.13 | spice | 0.14.1-r0 |
| Alpine 3.14 | spice | 0.14.1-r0 |
| Alpine 3.15 | spice | 0.14.1-r0 |
| Alpine 3.16 | spice | 0.14.1-r0 |
| Alpine 3.17 | spice | 0.14.1-r0 |
| Alpine 3.18 | spice | 0.14.1-r0 |
| Alpine 3.19 | spice | 0.14.1-r0 |
| Alpine 3.20 | spice | 0.14.1-r0 |
| Alpine 3.21 | spice | 0.14.1-r0 |
| Alpine 3.22 | spice | 0.14.1-r0 |
| Alpine 3.23 | spice | 0.14.1-r0 |
| Alpine 3.24 | spice | 0.14.1-r0 |
| Alpine 3.5 | spice | 0.12.8-r4 |
| Alpine 3.6 | spice | 0.13.3-r3 |
| Alpine 3.7 | spice | 0.14.1-r0 |
| Alpine 3.8 | spice | 0.14.1-r0 |
| Alpine 3.9 | spice | 0.14.1-r0 |
| Debian 12 | spice | 0.14.0-1.1 |
| Debian 12 | spice-gtk | 0.35-1 |
| Debian 13 | spice | 0.14.0-1.1 |
| Debian 13 | spice-gtk | 0.35-1 |
| Debian 14 | spice | 0.14.0-1.1 |
| Debian 14 | spice-gtk | 0.35-1 |
| Debian 8 | spice | 0.12.5-1+deb8u6 |
| Debian 8 | spice-gtk | 0.25-1+deb8u1 |
| Debian 9 | spice | 0.12.8-2.1+deb9u2 |
| Red Hat Enterprise Linux 6 | spice-glib | 0:0.26-8.el6_10.1 |
| Red Hat Enterprise Linux 6 | spice-glib-devel | 0:0.26-8.el6_10.1 |
| Red Hat Enterprise Linux 6 | spice-gtk | 0:0.26-8.el6_10.1 |
| Red Hat Enterprise Linux 6 | spice-gtk-debuginfo | 0:0.26-8.el6_10.1 |
| Red Hat Enterprise Linux 6 | spice-gtk-devel | 0:0.26-8.el6_10.1 |
| Red Hat Enterprise Linux 6 | spice-gtk-python | 0:0.26-8.el6_10.1 |
| Red Hat Enterprise Linux 6 | spice-gtk-tools | 0:0.26-8.el6_10.1 |
| Red Hat Enterprise Linux 6 | spice-server | 0:0.12.4-16.el6_10.1 |
| Red Hat Enterprise Linux 6 | spice-server-debuginfo | 0:0.12.4-16.el6_10.1 |
| Red Hat Enterprise Linux 6 | spice-server-devel | 0:0.12.4-16.el6_10.1 |
| Red Hat Enterprise Linux 7 | imgbased | 0:1.0.29-1.el7ev |
| Red Hat Enterprise Linux 7 | python-imgbased | 0:1.0.29-1.el7ev |
| Red Hat Enterprise Linux 7 | redhat-release-virtualization-host | 0:4.2-7.3.el7 |
| Red Hat Enterprise Linux 7 | redhat-virtualization-host | 0:4.2-20181026.0.el7_6 |
| Red Hat Enterprise Linux 7 | redhat-virtualization-host-image-update | 0:4.2-20181026.0.el7_6 |
| Red Hat Enterprise Linux 7 | redhat-virtualization-host-image-update-placeholder | 0:4.2-7.3.el7 |
| Red Hat Enterprise Linux 7 | spice | 0:0.14.0-2.el7_5.5 |
| Red Hat Enterprise Linux 7 | spice-debuginfo | 0:0.14.0-2.el7_5.5 |
| Red Hat Enterprise Linux 7 | spice-glib | 0:0.34-3.el7_5.2 |
| Red Hat Enterprise Linux 7 | spice-glib-devel | 0:0.34-3.el7_5.2 |
| Red Hat Enterprise Linux 7 | spice-gtk | 0:0.34-3.el7_5.2 |
| Red Hat Enterprise Linux 7 | spice-gtk-debuginfo | 0:0.34-3.el7_5.2 |
| Red Hat Enterprise Linux 7 | spice-gtk-tools | 0:0.34-3.el7_5.2 |
| Red Hat Enterprise Linux 7 | spice-gtk3 | 0:0.34-3.el7_5.2 |
| Red Hat Enterprise Linux 7 | spice-gtk3-devel | 0:0.34-3.el7_5.2 |
| Red Hat Enterprise Linux 7 | spice-gtk3-vala | 0:0.34-3.el7_5.2 |
| Red Hat Enterprise Linux 7 | spice-server | 0:0.14.0-2.el7_5.5 |
| Red Hat Enterprise Linux 7 | spice-server-devel | 0:0.14.0-2.el7_5.5 |
| SUSE Linux Enterprise Desktop 12 SP3 | spice | 0.12.8-6.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | spice-gtk | 0.33-3.6.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | spice-gtk | 0.34-3.3.1 |
| SUSE Linux Enterprise Module for Server Applications 15 | spice | 0.14.0-4.3.1 |
| SUSE Linux Enterprise Module for Server Applications 15 | spice-gtk | 0.34-3.3.1 |
| SUSE Linux Enterprise Server 11 SP4 | spice | 0.12.4-15.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | spice | 0.12.7-10.9.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | spice-gtk | 0.31-9.10.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | spice | 0.12.7-10.9.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | spice-gtk | 0.31-9.10.1 |
| SUSE Linux Enterprise Server 12 SP3 | spice | 0.12.8-6.1 |
| SUSE Linux Enterprise Server 12 SP3 | spice-gtk | 0.33-3.6.1 |
| SUSE Linux Enterprise Server 12-LTSS | spice | 0.12.4-8.18.1 |
| SUSE Linux Enterprise Server 12-LTSS | spice-gtk | 0.25-5.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | spice | 0.12.4-15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | spice | 0.12.7-10.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | spice-gtk | 0.31-9.10.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | spice | 0.12.8-6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | spice-gtk | 0.33-3.6.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | spice | 0.12.4-15.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | spice | 0.12.8-6.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | spice-gtk | 0.33-3.6.1 |
| SUSE OpenStack Cloud 7 | spice | 0.12.7-10.9.1 |
| SUSE OpenStack Cloud 7 | spice-gtk | 0.31-9.10.1 |
| Ubuntu 14.04 LTS | spice | 0.12.4-0nocelt2ubuntu1.7 |
| Ubuntu 16.04 LTS | spice-gtk | no fix |
| Ubuntu 16.04 LTS | spice-protocol | 0.12.10-1ubuntu0.2 |
| Ubuntu 18.04 LTS | spice | 0.14.0-1ubuntu2.2 |
| Ubuntu 18.04 LTS | spice-gtk | no fix |
| openSUSE Tumbleweed | spice | 0.15.0-1.3 |
| openSUSE Tumbleweed | spice-gtk | 0.39-1.8 |