A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts.

The issue has been fixed by upstream by bailing out with an error if the pointer to the start of some message data is strictly greater than the pointer to the end of the message data.

For Debian 8 'Jessie', this problem has been fixed in version 0.12.5-1+deb8u6.

We recommend that you upgrade your spice packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for spice fixes the following issues :

Security issues fixed :

  - CVE-2018-10873: Fix potential heap corruption when     demarshalling (bsc#1104448)

  - CVE-2018-10893: Avoid buffer overflow on image lz checks     (bsc#1101295)

This update was imported from the SUSE:SLE-15:Update update project.

This update for spice-gtk fixes the following issues :

Security issues fixed :

CVE-2018-10873: Fix potential heap corruption when demarshalling (bsc#1104448)

CVE-2018-10893: Avoid buffer overflow on image lz checks (bsc#1101295)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Missing check in     demarshal.py:write_validate_array_item() allows for     buffer overflow and denial of service (CVE-2018-10873)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for     demarshalling messages lacked sufficient bounds checks. A malicious client or server, after     authentication, could send specially crafted messages to its peer which would result in a crash or,     potentially, other impacts. (CVE-2018-10873)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-3326:01 advisory.

    * spice: Missing check in demarshal.py:write_validate_array_item() allows for buffer overflow and denial     of service (CVE-2018-10873)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
112225	Debian DLA-1486-1 : spice security update	Nessus	Debian Local Security Checks	2018/9/4	2024/8/13	high
112270	openSUSE Security Update : spice (openSUSE-2018-956)	Nessus	SuSE Local Security Checks	2018/9/4	2024/8/12	high
112276	SUSE SLES12 Security Update : spice-gtk (SUSE-SU-2018:2593-1)	Nessus	SuSE Local Security Checks	2018/9/4	2024/8/12	high
112277	SUSE SLED12 / SLES12 Security Update : spice-gtk (SUSE-SU-2018:2594-1)	Nessus	SuSE Local Security Checks	2018/9/4	2024/8/12	high
121000	EulerOS 2.0 SP5 : spice (EulerOS-SA-2019-1012)	Nessus	Huawei Local Security Checks	2019/1/8	2024/6/27	high
251727	Linux Distros Unpatched Vulnerability : CVE-2018-10873	Nessus	Misc.	2025/8/19	2025/8/19	high
288904	MiracleLinux 4 : spice-gtk-0.26-8.AXS4.1, spice-server-0.12.4-16.AXS4.1 (AXSA:2018-3326:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high

检测

插件搜索

high

high

high

high

high

high

high