PT-2019-1508 · Red Hat+4 · Spice+5
Christophe Fergeau
·
Published
2019-01-11
·
Updated
2024-06-15
·
CVE-2019-3813
CVSS v3.1
7.5
High
| Vector | AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Spice versions 0.5.2 through 0.14.1
Description
The issue is related to an out-of-bounds read due to an off-by-one error in the
memslot get virt function. This may lead to a denial of service or, in the worst case, code execution by unauthenticated attackers. The vulnerability is associated with the Spice remote virtual "desktop" rendering system and can be exploited by remote attackers.Recommendations
For Spice versions 0.5.2 through 0.14.1, consider disabling the
memslot get virt function as a temporary workaround until a patch is available. Restrict access to the Spice library to minimize the risk of exploitation. Avoid using the vulnerable memslot get virt function in the affected Spice versions until the issue is resolved.Fix
DoS
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Centos
Red Hat
Spice
Suse
Ubuntu