Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2018-10873 →
DEBIAN-CVE-2018-10873
A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
spice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-1.1"}]}]
Debian:13
spice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-1.1"}]}]
Debian:14
spice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-1.1"}]}]
Debian:12
spice-gtk
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35-1"}]}]
Debian:13
spice-gtk
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35-1"}]}]
Debian:14
spice-gtk
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35-1"}]}]
Références
- advisory security-tracker.debian.org