Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:3842-1

Опубликовано: 16 дек. 2020
Источник: suse-cvrf

Описание

Security update for spice

This update for spice fixes the following issues:

  • CVE-2018-10873: Fixed a potential heap corruption when demarshalling (bsc#1104448)
  • CVE-2018-10893: Fixed a buffer overflow on image lz checks (bsc#1101295)

Список пакетов

SUSE Linux Enterprise Server 12 SP2-BCL
libspice-server1-0.12.7-10.9.1
SUSE Linux Enterprise Server 12 SP2-LTSS
libspice-server1-0.12.7-10.9.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
libspice-server1-0.12.7-10.9.1
SUSE OpenStack Cloud 7
libspice-server1-0.12.7-10.9.1

Ссылки

Описание

A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP2-BCL:libspice-server1-0.12.7-10.9.1
SUSE Linux Enterprise Server 12 SP2-LTSS:libspice-server1-0.12.7-10.9.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2:libspice-server1-0.12.7-10.9.1
SUSE OpenStack Cloud 7:libspice-server1-0.12.7-10.9.1
Ссылки

Описание

Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A malicious server could cause the client to crash or, potentially, execute arbitrary code.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP2-BCL:libspice-server1-0.12.7-10.9.1
SUSE Linux Enterprise Server 12 SP2-LTSS:libspice-server1-0.12.7-10.9.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2:libspice-server1-0.12.7-10.9.1
SUSE OpenStack Cloud 7:libspice-server1-0.12.7-10.9.1
Ссылки