7.6
High
CVE-2018-10893 Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames
Description
Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A malicious server could cause the client to crash or, potentially, execute arbitrary code.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| spice-client | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- [spice-devel] 20180703 [PATCH spice-common v3] lz: Avoid buffer reading overflow checking for image type lists.freedesktop.org
- RHSA-2019:2229 access.redhat.com
- RHSA-2020:0471 access.redhat.com
Timeline
- Published
- Last modified