PT-2018-3720 · Red Hat+2 · Spice-Client+3

Frediano Ziglio · Published 2018-07-20 · Updated 2024-06-15 · CVE-2018-10893

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions spice-client (affected versions not specified)

Description The issue is related to integer overflow in the spice-client software for remote access. It may allow a remote attacker to gain access to confidential information or cause a denial of service. Additionally, multiple integer overflow and buffer overflow issues were found in the handling of LZ compressed frames, which could cause the client to crash or potentially execute arbitrary code if a malicious server is involved.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Heap Based Buffer Overflow

Integer Overflow

Weakness Enumeration

CWE-122

CWE-190

Related Identifiers

BDU:2021-03769

CESA-2019_2229

CESA-2020_0471

CVE-2018-10893

MGASA-2019-0099

MGASA-2019-0100

OPENSUSE-SU-2018_2598-1

OPENSUSE-SU-2018_2601-1

OPENSUSE-SU-2018_2602-1

OPENSUSE-SU-2018_2730-1

OPENSUSE-SU-2024:11397-1

OPENSUSE-SU-2024:11398-1

RHSA-2019:2229

RHSA-2019_2229

RHSA-2020:0471

RHSA-2020_0471

SUSE-SU-2018:2563-1

SUSE-SU-2018:2566-1

SUSE-SU-2018:2584-1

SUSE-SU-2018:2593-1

SUSE-SU-2018:2594-1

SUSE-SU-2018:2595-1

SUSE-SU-2018:2709-1

SUSE-SU-2020:3841-1

SUSE-SU-2020:3842-1

Affected Products

Centos

Red Hat

Suse

Spice-Client

References · 60

• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/OWH2AHGKTPR5QUGXUYGY6CAEI3O7RPLL · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-10893 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:3841-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20210730SE16 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-10893 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:11397-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2020:0471 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2019-0100.html · Security Note
• https://advisories.mageia.org/MGASA-2019-0099.html · Security Note
• https://lists.freedesktop.org/archives/spice-devel/2018-July/044489.html · Patch
• https://osv.dev/vulnerability/CVE-2018-10893 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:2566-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:2594-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11398-1 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10893 · Patch