Matthias Gerstner discovered that SPICE vdagent incorrectly handled the
active_xfers hash table. A local attacker could possibly use this issue to
cause SPICE vdagent to consume memory, resulting in a denial of service
(CVE-2020-25650).
Matthias Gerstner discovered that SPICE vdagent incorrectly handled the
active_xfers hash table. A local attacker could possibly use this issue to
cause SPICE vdagent to consume memory, resulting in a denial of service, or
obtain sensitive file contents (CVE-2020-25651).
Matthias Gerstner discovered that SPICE vdagent incorrectly handled a large
number of client connections. A local attacker could possibly use this
issue to cause SPICE vdagent to consume resources, resulting in a denial of
service (CVE-2020-25652).
Matthias Gerstner discovered that SPICE vdagent incorrectly handled client
connections. A local attacker could possibly use this issue to obtain
sensitive information, paste clipboard contents, and transfer files into
the active session (C...
- https://bugs.mageia.org/show_bug.cgi?id=27568
- https://ubuntu.com/security/notices/USN-4617-1
- https://www.openwall.com/lists/oss-security/2020/11/04/1
- https://www.cve.org/CVERecord?id=CVE-2020-25650
- https://www.cve.org/CVERecord?id=CVE-2020-25651
- https://www.cve.org/CVERecord?id=CVE-2020-25652
- https://www.cve.org/CVERecord?id=CVE-2020-25653
- 7/core/spice-vdagent-0.19.0-1.1.mga7
Get the latest Linux and open source security news straight to your inbox.