Skip to content
Sign in Sign up
JA EN FR
SecPulse
Unrated

spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the s...

CVE-2017-15108 First seen on SecPulse

Fix status by distribution

Fixed packages published by each distribution for this CVE

Original description The description as published by the source.

spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to inject arbitrary commands to be executed.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details