CVE-2017-7506
Severity CVSS v4.0:
Pending analysis
Type:
CWE-119
Buffer Errors
Publication date:
18/07/2017
Last modified:
20/04/2025
Description
spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.
Impact
Base Score 3.x
8.80
Severity 3.x
HIGH
Base Score 2.0
6.50
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:spice_project:spice:0.5.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:spice_project:spice:0.5.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:spice_project:spice:0.6.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:spice_project:spice:0.6.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:spice_project:spice:0.6.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:spice_project:spice:0.6.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:spice_project:spice:0.6.4:*:*:*:*:*:*:* | ||
cpe:2.3:a:spice_project:spice:0.7.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:spice_project:spice:0.7.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:spice_project:spice:0.7.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:spice_project:spice:0.7.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:spice_project:spice:0.8.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:spice_project:spice:0.8.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:spice_project:spice:0.8.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:spice_project:spice:0.8.3:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://www.debian.org/security/2017/dsa-3907
- http://www.openwall.com/lists/oss-security/2017/07/14/1
- http://www.securityfocus.com/bid/99583
- https://access.redhat.com/errata/RHSA-2017:2471
- https://access.redhat.com/errata/RHSA-2018:3522
- https://bugzilla.redhat.com/show_bug.cgi?id=1452606
- http://www.debian.org/security/2017/dsa-3907
- http://www.openwall.com/lists/oss-security/2017/07/14/1
- http://www.securityfocus.com/bid/99583
- https://access.redhat.com/errata/RHSA-2017:2471
- https://access.redhat.com/errata/RHSA-2018:3522
- https://bugzilla.redhat.com/show_bug.cgi?id=1452606