PT-2018-2308 · Red Hat+4 · Spice+5
Frediano Ziglio
·
Publicado
2018-08-17
·
Atualizado
2024-06-15
·
CVE-2018-10873
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
SPICE versions prior to 0.14.1
Description
A vulnerability was discovered in the demarshalling of messages, where the generated code lacked sufficient bounds checks. This could allow a malicious client or server, after authentication, to send specially crafted messages to its peer, resulting in a crash or potentially other impacts. The issue is related to errors in message processing, leading to buffer overflow. Exploitation of the vulnerability could allow a remote attacker to access confidential information or cause a denial of service.
Recommendations
For versions prior to 0.14.1, update to version 0.14.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the
demarshal.py function or the write validate array item() function until a patch is available. Avoid using the vulnerable demarshalling code in the SPICE protocol until the issue is resolved.Correção
RCE
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Red Hat
Spice
Suse
Ubuntu