CVE-2013-4282
02.11.2013, 19:55
Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service (crash) via a long password in a SPICE ticket.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| spice_project | spice | 0.12.0 |
| redhat | enterprise_virtualization | 3.0 |
| redhat | enterprise_linux | 6.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| spice |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libspice-server-devel |
| ||||||||||||||||||||||||
| libspice-server1 |
|
Red Hat Enterprise Linux Releases
Common Weakness Enumeration
References