CVE-2026-57965

EUVD-2026-40049
A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This vulnerability can lead to a heap buffer overflow, causing the spice-vdagent daemon to crash and resulting in a Denial of Service (DoS) for the virtual machine. This issue requires the SPICE host to be untrusted or compromised for exploitation.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.1 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 4.32%
Affected Products (NVD)
VendorProductVersion
redhatenterprise_linux
6.0
redhatenterprise_linux
7.0
redhatenterprise_linux
8.0
redhatenterprise_linux
9.0
redhatenterprise_linux
10.0
spice-spacespice-vdagent
-
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
spice-vdagent
bookworm
vulnerable
bookworm (security)
0.22.1-3+deb12u1
fixed
forky
0.23.0-3
fixed
sid
0.23.0-3
fixed
trixie
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
spice-vdagent
bionic
needed
focal
needed
jammy
Fixed 0.22.1-1ubuntu0.1
released
noble
Fixed 0.22.1-4ubuntu0.1
released
questing
ignored
resolute
Fixed 0.23.0-1ubuntu0.1
released
xenial
needed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
spice-vdagent
Amazon Linux 2023
0:0.22.1-7.amzn2023.0.1
fixed
spice-vdagent-debuginfo
Amazon Linux 2023
0:0.22.1-7.amzn2023.0.1
fixed
spice-vdagent-debugsource
Amazon Linux 2023
0:0.22.1-7.amzn2023.0.1
fixed
Common Weakness Enumeration
References
https://access.redhat.com/security/cve/CVE-2026-57965
https://bugzilla.redhat.com/show_bug.cgi?id=2493581