Vulnerability Bulletins |
DSA-4319 spice - security update |
|
| Affected software | Debian |
|
Frediano Ziglio reported a missing check in the script to generatedemarshalling code in the SPICE protocol client and server library. Thegenerated demarshalling code is prone to multiple buffer overflows. Anauthenticated attacker can take advantage of this flaw to cause a denialof service (spice server crash), or possibly, execute arbitrary code. More info: https://www.debian.org/security/2018/dsa-4319 |
|