Test Kennung:	1.3.6.1.4.1.25623.1.0.704319
Kategorie:	Debian Local Security Checks
Titel:	Debian Security Advisory DSA 4319-1 (spice - security update)
Zusammenfassung:	Frediano Ziglio reported a missing check in the script to generate;demarshalling code in the SPICE protocol client and server library. The;generated demarshalling code is prone to multiple buffer overflows. An;authenticated attacker can take advantage of this flaw to cause a denial;of service (spice server crash), or possibly, execute arbitrary code.
Beschreibung:	Summary: Frediano Ziglio reported a missing check in the script to generate demarshalling code in the SPICE protocol client and server library. The generated demarshalling code is prone to multiple buffer overflows. An authenticated attacker can take advantage of this flaw to cause a denial of service (spice server crash), or possibly, execute arbitrary code. Affected Software/OS: spice on Debian Linux Solution: For the stable distribution (stretch), this problem has been fixed in version 0.12.8-2.1+deb9u2. We recommend that you upgrade your spice packages. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2018-10873
Copyright	Copyright (C) 2018 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.