Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Scientific Linux SL7: SLSA-2017-2471-1 Important Spice Server Update

Calendar Aug 21, 2017 • User Avatar LinuxSecurity Advisories
1 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory important memory leak server crash spice authenticated access Scientific Linux
A vulnerability was discovered in spice server's protocol handling. An authenticated attacker could send specially crafted messages to the spice server, causing out-of-bounds memory accesses, leading to parts of server memory being leaked or a crash. (CVE-2017-7506) This issue was discovered by Frediano Ziglio (Red Hat). SL7 x86_64 spice-debuginfo-0.12.8-2.el7.1.x86_64.rpm spice-se [More...] 
Synopsis:          Important: spice security update
Advisory ID:       SLSA-2017:2471-1
Issue Date:        2017-08-15
CVE Numbers:       CVE-2017-7506
--

Security Fix(es):

* A vulnerability was discovered in spice server's protocol handling. An
authenticated attacker could send specially crafted messages to the spice
server, causing out-of-bounds memory accesses, leading to parts of server
memory being leaked or a crash. (CVE-2017-7506)

This issue was discovered by Frediano Ziglio (Red Hat).
--

SL7
  x86_64
    spice-debuginfo-0.12.8-2.el7.1.x86_64.rpm
    spice-server-0.12.8-2.el7.1.x86_64.rpm
    spice-server-devel-0.12.8-2.el7.1.x86_64.rpm

- Scientific Linux Development Team