İçeriğe atla
Noroxi

spice project kayıtları

spice project üreticisine ait 15 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%100
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

15 kayıt
  • CVE-2016-0749
    42Planlayın

    The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitra

    KritikCVSS 9,8İstismar yokEPSS %8

    opensuse · leap9 Haz 2016

  • CVE-2017-7506
    36İzleyin

    spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attac

    YüksekCVSS 8,8İstismar yokEPSS %4

    spice project · spice18 Tem 2017

  • CVE-2018-10873
    36İzleyin

    A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bou

    YüksekCVSS 8,8İstismar yokEPSS %3

    spice project · spice17 Ağu 2018

  • CVE-2016-9577
    36İzleyin

    A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling.

    YüksekCVSS 8,8İstismar yokEPSS %3

    spice project · spice27 Tem 2018

  • CVE-2018-10893
    36İzleyin

    Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames.

    YüksekCVSS 8,8İstismar yokEPSS %2

    spice project · spice11 Eyl 2018

  • CVE-2016-9578
    31İzleyin

    A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling.

    YüksekCVSS 7,5İstismar yokEPSS %2

    spice project · spice27 Tem 2018

  • CVE-2015-5260
    31İzleyin

    Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service (heap-based memory corruption and QEMU-

    YüksekCVSS 7,8İstismar yokEPSS %0

    redhat · enterprise linux desktop7 Haz 2016

  • CVE-2019-3813
    30İzleyin

    Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt.

    YüksekCVSS 7,5İstismar yokEPSS %1

    spice project · spice4 Şub 2019

  • CVE-2015-5261
    28İzleyin

    Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via gues

    YüksekCVSS 7,1İstismar yokEPSS %0

    canonical · ubuntu linux7 Haz 2016

  • CVE-2016-2150
    28İzleyin

    SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar

    YüksekCVSS 7,1İstismar yokEPSS %0

    redhat · enterprise linux9 Haz 2016

  • CVE-2020-14355
    27İzleyin

    Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14

    OrtaCVSS 6,6İstismar yokEPSS %2

    spice project · spice7 Eki 2020

  • CVE-2015-3247
    27İzleyin

    Race condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote authenticated guest user to cause a denial of s

    OrtaCVSS 6,9İstismar yokEPSS %1

    spice project · spice8 Eyl 2015

  • CVE-2021-20201
    22İzleyin

    A flaw was found in spice in versions before 0.14.92.

    OrtaCVSS 5,3İstismar yokEPSS %2

    spice project · spice28 May 2021

  • CVE-2013-4282
    21İzleyin

    Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of

    OrtaCVSS 5,0İstismar yokEPSS %2

    spice project · spice2 Kas 2013

  • CVE-2013-4130
    21İzleyin

    The (1) red_channel_pipes_add_type and (2) red_channel_pipes_add_empty_msg functions in server/red_channel.c in SPICE before 0.12.4 do not p

    OrtaCVSS 5,0İstismar yokEPSS %2

    spice project · spice20 Ağu 2013