spice-space kayıtları
spice-space üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')2
- CWE-770 Allocation of Resources Without Limits or Throttling2
- CWE-190 Integer Overflow or Wraparound1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-862 Missing Authorization1
- CWE-416 Use After Free1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2020-23793İstismar yok | An issue was discovered in spice-server spice-server-0.14.0-6.el7_6.1.x86_64 of Redhat's VDI product.spice-space · spice-server · CWE-862 | Yüksek8,6 | — | %0,8 | 22 Ağu 2023 |
31İzleyin | CVE-2017-15108İstismar yok | spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with accesspice-space · spice-vdagent · CWE-78 | Yüksek7,8 | — | %0,4 | 19 Oca 2018 |
25İzleyin | CVE-2020-25653İstismar yok | A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections.spice-space · spice-vdagent · CWE-362 | Orta6,3 | — | %0,3 | 25 Kas 2020 |
25İzleyin | CVE-2021-3700İstismar yok | A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredispice-space · usbredir · CWE-416 | Orta6,4 | — | %0,3 | 24 Şub 2022 |
25İzleyin | CVE-2020-25651İstismar yok | A flaw was found in the SPICE file transfer protocol.spice-space · spice-vdagent · CWE-362 | Orta6,4 | — | %0,3 | 25 Kas 2020 |
22İzleyin | CVE-2020-25650İstismar yok | A flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system to the virtual machine.spice-space · spice-vdagent · CWE-770 | Orta5,5 | — | %0,5 | 25 Kas 2020 |
22İzleyin | CVE-2020-25652İstismar yok | A flaw was found in the spice-vdagentd daemon, where it did not properly handle client connections that can be established via the UNIX domaspice-space · spice-vdagent · CWE-770 | Orta5,5 | — | %0,4 | 25 Kas 2020 |
20İzleyin | CVE-2026-57965İstismar yok | Spice-vdagent: integer overflow in udscs_write() leading to heap buffer overflowredhat · enterprise linux · CWE-190 | Orta5,1 | — | %0,1 | 29 Haz 2026 |
17İzleyin | CVE-2026-57966İstismar yok | Spice-vdagent: path traversal in file transfer via unsanitized filenameredhat · enterprise linux · CWE-22 | Orta4,4 | — | %0,1 | 29 Haz 2026 |
- CVE-2020-2379334İzleyin
An issue was discovered in spice-server spice-server-0.14.0-6.el7_6.1.x86_64 of Redhat's VDI product.
YüksekCVSS 8,6İstismar yokEPSS %1spice-space · spice-server22 Ağu 2023
- CVE-2017-1510831İzleyin
spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with acces
YüksekCVSS 7,8İstismar yokEPSS %0spice-space · spice-vdagent19 Oca 2018
- CVE-2020-2565325İzleyin
A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections.
OrtaCVSS 6,3İstismar yokEPSS %0spice-space · spice-vdagent25 Kas 2020
- CVE-2021-370025İzleyin
A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredi
OrtaCVSS 6,4İstismar yokEPSS %0spice-space · usbredir24 Şub 2022
- CVE-2020-2565125İzleyin
A flaw was found in the SPICE file transfer protocol.
OrtaCVSS 6,4İstismar yokEPSS %0spice-space · spice-vdagent25 Kas 2020
- CVE-2020-2565022İzleyin
A flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system to the virtual machine.
OrtaCVSS 5,5İstismar yokEPSS %1spice-space · spice-vdagent25 Kas 2020
- CVE-2020-2565222İzleyin
A flaw was found in the spice-vdagentd daemon, where it did not properly handle client connections that can be established via the UNIX doma
OrtaCVSS 5,5İstismar yokEPSS %0spice-space · spice-vdagent25 Kas 2020
- CVE-2026-5796520İzleyin
Spice-vdagent: integer overflow in udscs_write() leading to heap buffer overflow
OrtaCVSS 5,1İstismar yokEPSS %0redhat · enterprise linux29 Haz 2026
- CVE-2026-5796617İzleyin
Spice-vdagent: path traversal in file transfer via unsanitized filename
OrtaCVSS 4,4İstismar yokEPSS %0redhat · enterprise linux29 Haz 2026