7.6
Élevée
CVE-2018-10893 Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames
Description
Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A malicious server could cause the client to crash or, potentially, execute arbitrary code.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| spice-client | Versions non publiées |
Références
- bugzilla.redhat.com bugzilla.redhat.com
- [spice-devel] 20180703 [PATCH spice-common v3] lz: Avoid buffer reading overflow checking for image type lists.freedesktop.org
- RHSA-2019:2229 access.redhat.com
- RHSA-2020:0471 access.redhat.com
Chronologie
- Publiée
- Dernière modification