PT-2017-3269 · Red Hat+4 · Spice+5

Published 2017-01-17 · Updated 2023-02-12 · CVE-2017-7506

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions spice versions prior to 0.14

Description The issue is related to out-of-bounds memory access when processing specially crafted messages from an authenticated attacker to the spice server, resulting in a crash and/or server memory leak. It is also described as a buffer overflow vulnerability, which can allow a remote attacker to cause a denial of service or execute arbitrary code using a specially crafted message.

Recommendations For spice versions prior to 0.14, update to version 0.14 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2017-1042

BDU:2018-00028

CESA-2017_2471

CESA-2018_3522

CVE-2017-7506

DSA-3907-1

MGASA-2017-0239

OPENSUSE-SU-2017_1843-1

OPENSUSE-SU-2017_2604-1

RHSA-2017:2471

RHSA-2017_2471

RHSA-2018:3522

RHSA-2018_3522

SUSE-SU-2017:1832-1

SUSE-SU-2017:1836-1

SUSE-SU-2017:1837-1

SUSE-SU-2017:1839-1

SUSE-SU-2017:2552-1

SUSE-SU-2017_1832-1

SUSE-SU-2017_1836-1

SUSE-SU-2017_1837-1

SUSE-SU-2017_1839-1

SUSE-SU-2017_2552-1

USN-3355-1

Affected Products

Alt Linux

Centos

Red Hat

Suse

Ubuntu

Spice

References · 64

• https://osv.dev/vulnerability/SUSE-SU-2017:1837-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3355-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:1839-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-7506 · Vendor Advisory
• http://debian.org/security/2017/dsa-3907 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:1836-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0239 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7506 · Security Note
• https://linux.oracle.com/errata/ELSA-2017-2471.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-7506 · Security Note
• https://osv.dev/vulnerability/ALPINE-CVE-2017-7506 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2017:2471 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3907-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0239.html · Security Note
• https://cve.org/CVERecord?id=CVE-2017-7506 · Security Note