Описание
ELSA-2015-1890: spice security update (IMPORTANT)
[0.12.4-9.3]
- CVE-2015-5260 CVE-2015-5261 fixed various security flaws Resolves: rhbz#1262771
[0.12.4-9.2]
- Validate surface_id Resolves: rhbz#1262771
Обновленные пакеты
Oracle Linux 7
Oracle Linux x86_64
spice-server
0.12.4-9.el7_1.3
spice-server-devel
0.12.4-9.el7_1.3
Связанные CVE
Связанные уязвимости
oracle-oval
больше 10 лет назад
ELSA-2015-1889: spice-server security update (IMPORTANT)
CVSS3: 7.1
ubuntu
больше 9 лет назад
Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation.