The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3751-1 advisory.

    It was discovered that Spice incorrectly handled certain messages. An attacker could possibly use this     issue to cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts.

The issue has been fixed by upstream by bailing out with an error if the pointer to the start of some message data is strictly greater than the pointer to the end of the message data.

For Debian 8 'Jessie', this problem has been fixed in version 0.12.5-1+deb8u6.

We recommend that you upgrade your spice packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for     demarshalling messages lacked sufficient bounds checks. A malicious client or server, after     authentication, could send specially crafted messages to its peer which would result in a crash or,     potentially, other impacts. (CVE-2018-10873)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-3326:01 advisory.

    * spice: Missing check in demarshal.py:write_validate_array_item() allows for buffer overflow and denial     of service (CVE-2018-10873)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for spice fixes the following issues :

Security issues fixed :

  - CVE-2018-10873: Fix potential heap corruption when     demarshalling (bsc#1104448)

  - CVE-2018-10893: Avoid buffer overflow on image lz checks     (bsc#1101295)

This update was imported from the SUSE:SLE-15:Update update project.

This update for spice-gtk fixes the following issues :

Security issues fixed :

CVE-2018-10873: Fix potential heap corruption when demarshalling (bsc#1104448)

CVE-2018-10893: Avoid buffer overflow on image lz checks (bsc#1101295)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the spice-gtk packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - Missing check in     demarshal.py:write_validate_array_item() allows for     buffer overflow and denial of service (CVE-2018-10873)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts.

The issue has been fixed by upstream by bailing out with an error if the pointer to the start of some message data is strictly greater than the pointer to the end of the message data.

The above issue and fix have already been announced for the 'spice' Debian package (as DLA-1486-1 [1]). This announcement is about the 'spice-gtk' Debian package (which ships some copies of code from the 'spice' package, where the fix of this issue had to be applied).

[1] https://lists.debian.org/debian-lts-announce/2018/08/msg00037.html

For Debian 8 'Jessie', this problem has been fixed in version 0.25-1+deb8u1.

We recommend that you upgrade your spice-gtk packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2731 advisory.

    The Simple Protocol for Independent Computing Environments (SPICE) is a remote display system built for     virtual environments which allows the user to view a computing 'desktop' environment not only on the     machine where it is running, but from anywhere on the Internet and from a wide variety of machine     architectures.

    The spice-gtk packages provide a GIMP Toolkit (GTK+) widget for Simple Protocol for Independent Computing     Environments (SPICE) clients. Both Virtual Machine Manager and Virtual Machine Viewer can make use of this     widget to access virtual machines using the SPICE protocol.

    Security Fix(es):

    * spice: Missing check in demarshal.py:write_validate_array_item() allows for buffer overflow and denial     of service (CVE-2018-10873)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

    This issue was discovered by Frediano Ziglio (Red Hat).

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The spice-gtk packages provide a GIMP Toolkit (GTK+) widget for Simple Protocol for Independent Computing Environments (SPICE) clients. Both Virtual Machine Manager and Virtual Machine Viewer can make use of this widget to access virtual machines using the SPICE protocol.

Security Fix(es) :

  - spice: Missing check in     demarshal.py:write_validate_array_item() allows for     buffer overflow and denial of service (CVE-2018-10873)

This issue was discovered by Frediano Ziglio (Red Hat).

An update for spice and spice-gtk is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The Simple Protocol for Independent Computing Environments (SPICE) is a remote display system built for virtual environments which allows the user to view a computing 'desktop' environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures.

The spice-gtk packages provide a GIMP Toolkit (GTK+) widget for Simple Protocol for Independent Computing Environments (SPICE) clients. Both Virtual Machine Manager and Virtual Machine Viewer can make use of this widget to access virtual machines using the SPICE protocol.

Security Fix(es) :

* spice: Missing check in demarshal.py:write_validate_array_item() allows for buffer overflow and denial of service (CVE-2018-10873)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

This issue was discovered by Frediano Ziglio (Red Hat).

Frediano Ziglio reported a missing check in the script to generate demarshalling code in the SPICE protocol client and server library.
The generated demarshalling code is prone to multiple buffer overflows. An authenticated attacker can take advantage of this flaw to cause a denial of service (spice server crash), or possibly, execute arbitrary code.

This update for spice-gtk fixes the following issues :

Security issues fixed :

CVE-2018-10873: Fix potential heap corruption when demarshalling (bsc#1104448)

CVE-2018-10893: Avoid buffer overflow on image lz checks (bsc#1101295)

Other bugs fixed: Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for spice-gtk fixes the following issues :

CVE-2018-10873: Fixed a potential heap corruption when demarshalling (bsc#1104448)

CVE-2018-10893: Fixed a buffer overflow on image lz checks (bsc#1101295)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
112149	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Spice vulnerability (USN-3751-1)	Nessus	Ubuntu Local Security Checks	2018/8/28	2024/8/27	high
112225	Debian DLA-1486-1 : spice security update	Nessus	Debian Local Security Checks	2018/9/4	2024/8/13	high
251727	Linux Distros Unpatched Vulnerability : CVE-2018-10873	Nessus	Misc.	2025/8/19	2025/8/19	high
288904	MiracleLinux 4 : spice-gtk-0.26-8.AXS4.1, spice-server-0.12.4-16.AXS4.1 (AXSA:2018-3326:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high
112270	openSUSE Security Update : spice (openSUSE-2018-956)	Nessus	SuSE Local Security Checks	2018/9/4	2024/8/12	high
112276	SUSE SLES12 Security Update : spice-gtk (SUSE-SU-2018:2593-1)	Nessus	SuSE Local Security Checks	2018/9/4	2024/8/12	high
112277	SUSE SLED12 / SLES12 Security Update : spice-gtk (SUSE-SU-2018:2594-1)	Nessus	SuSE Local Security Checks	2018/9/4	2024/8/12	high
123886	EulerOS Virtualization 2.5.4 : spice-gtk (EulerOS-SA-2019-1200)	Nessus	Huawei Local Security Checks	2019/4/9	2024/6/4	high
112228	Debian DLA-1489-1 : spice-gtk security update	Nessus	Debian Local Security Checks	2018/9/4	2024/8/13	high
117625	RHEL 7 : spice and spice-gtk (RHSA-2018:2731)	Nessus	Red Hat Local Security Checks	2018/9/21	2024/11/5	high
117628	Scientific Linux Security Update : spice-gtk and spice-server on SL6.x i386/x86_64 (20180920)	Nessus	Scientific Linux Local Security Checks	2018/9/21	2024/8/6	high
117826	CentOS 7 : spice / spice-gtk (CESA-2018:2731)	Nessus	CentOS Local Security Checks	2018/10/1	2022/2/24	high
118122	Debian DSA-4319-1 : spice - security update	Nessus	Debian Local Security Checks	2018/10/16	2022/2/8	high
120098	SUSE SLED15 / SLES15 Security Update : spice-gtk (SUSE-SU-2018:2709-1)	Nessus	SuSE Local Security Checks	2019/1/2	2024/7/10	high
144360	SUSE SLES12 Security Update : spice-gtk (SUSE-SU-2020:3841-1)	Nessus	SuSE Local Security Checks	2020/12/17	2024/2/1	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high