Описание
Security update for spice
This update for spice fixes the following security issues:
- CVE-2017-7506: Fixed an out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak (bsc#1046779).
This update was imported from the SUSE:SLE-12-SP3:Update update project.
Список пакетов
openSUSE Leap 42.3
libspice-server-devel-0.12.8-3.1
libspice-server1-0.12.8-3.1
spice-0.12.8-3.1
Ссылки
- E-Mail link for openSUSE-SU-2017:2604-1
- SUSE Security Ratings
Описание
spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.
Затронутые продукты
openSUSE Leap 42.3:libspice-server-devel-0.12.8-3.1
openSUSE Leap 42.3:libspice-server1-0.12.8-3.1
openSUSE Leap 42.3:spice-0.12.8-3.1
Ссылки
- CVE-2017-7506
- SUSE Bug 1046779
- SUSE Bug 1047730