This update for spice fixes the following issues :

Security issues fixed :

  - CVE-2018-10873: Fix potential heap corruption when     demarshalling (bsc#1104448)

  - CVE-2018-10893: Avoid buffer overflow on image lz checks     (bsc#1101295)

This update was imported from the SUSE:SLE-15:Update update project.

The remote NewStart CGSL host, running version MAIN 4.05, has spice-server packages installed that are affected by multiple vulnerabilities:

  - A vulnerability was discovered in spice server's     protocol handling. An authenticated attacker could send     specially crafted messages to the spice server, causing     out-of-bounds memory accesses, leading to parts of     server memory being leaked or a crash. (CVE-2017-7506)

  - A vulnerability was discovered in SPICE where the     generated code used for demarshalling messages lacked     sufficient bounds checks. A malicious client or server,     after authentication, could send specially crafted     messages to its peer which would result in a crash or,     potentially, other impacts. (CVE-2018-10873)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-3324:02 advisory.

    [Security Fix]
    - SPICE



    (CVE-2018-10873)     CVEJVNhttp://jvndb.jvn.jp/

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3751-1 advisory.

    It was discovered that Spice incorrectly handled certain messages. An attacker could possibly use this     issue to cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts.

The issue has been fixed by upstream by bailing out with an error if the pointer to the start of some message data is strictly greater than the pointer to the end of the message data.

For Debian 8 'Jessie', this problem has been fixed in version 0.12.5-1+deb8u6.

We recommend that you upgrade your spice packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for spice-gtk fixes the following issues :

Security issues fixed :

CVE-2018-10873: Fix potential heap corruption when demarshalling (bsc#1104448)

CVE-2018-10893: Avoid buffer overflow on image lz checks (bsc#1101295)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Missing check in     demarshal.py:write_validate_array_item() allows for     buffer overflow and denial of service (CVE-2018-10873)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for     demarshalling messages lacked sufficient bounds checks. A malicious client or server, after     authentication, could send specially crafted messages to its peer which would result in a crash or,     potentially, other impacts. (CVE-2018-10873)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-3326:01 advisory.

    * spice: Missing check in demarshal.py:write_validate_array_item() allows for buffer overflow and denial     of service (CVE-2018-10873)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2731 advisory.

    spice     [0.14.0-2.0.2]
    - add arm suppport

    [0.14.0-2.5]
    - Fix flexible array buffer overflow       Resolves: rhbz#1596008

    spice-gtk     [0.34-3.2]
    - Fix flexible array buffer overflow       Resolves: rhbz#1596008

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2732 advisory.

    The Simple Protocol for Independent Computing Environments (SPICE) is a remote display protocol for     virtual environments. SPICE users can access a virtualized desktop or server from the local system or any     system with network access to the server. SPICE is used in Red Hat Enterprise Linux for viewing     virtualized guests running on the Kernel-based Virtual Machine (KVM) hypervisor or on Red Hat Enterprise     Virtualization Hypervisors.

    The spice-gtk packages provide a GIMP Toolkit (GTK+) widget for Simple Protocol for Independent Computing     Environments (SPICE) clients. Both Virtual Machine Manager and Virtual Machine Viewer can make use of this     widget to access virtual machines using the SPICE protocol.

    Security Fix(es):

    * spice: Missing check in demarshal.py:write_validate_array_item() allows for buffer overflow and denial     of service (CVE-2018-10873)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

    This issue was discovered by Frediano Ziglio (Red Hat).

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for spice fixes the following issues :

Security issues fixed :

CVE-2018-10873: Fix potential heap corruption when demarshalling (bsc#1104448)

CVE-2018-10893: Avoid buffer overflow on image lz checks (bsc#1101295)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
123287	openSUSE Security Update : spice (openSUSE-2019-660)	Nessus	SuSE Local Security Checks	2019/3/27	2024/6/11	high
127410	NewStart CGSL MAIN 4.05 : spice-server Multiple Vulnerabilities (NS-SA-2019-0144)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2021/1/14	high
294222	MiracleLinux 7 : spice-0.14.0-2.el7.5, spice-gtk-0.34-3.el7.2 (AXSA:2018-3324:02)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
112149	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Spice vulnerability (USN-3751-1)	Nessus	Ubuntu Local Security Checks	2018/8/28	2024/8/27	high
112225	Debian DLA-1486-1 : spice security update	Nessus	Debian Local Security Checks	2018/9/4	2024/8/13	high
112270	openSUSE Security Update : spice (openSUSE-2018-956)	Nessus	SuSE Local Security Checks	2018/9/4	2024/8/12	high
112276	SUSE SLES12 Security Update : spice-gtk (SUSE-SU-2018:2593-1)	Nessus	SuSE Local Security Checks	2018/9/4	2024/8/12	high
112277	SUSE SLED12 / SLES12 Security Update : spice-gtk (SUSE-SU-2018:2594-1)	Nessus	SuSE Local Security Checks	2018/9/4	2024/8/12	high
121000	EulerOS 2.0 SP5 : spice (EulerOS-SA-2019-1012)	Nessus	Huawei Local Security Checks	2019/1/8	2024/6/27	high
251727	Linux Distros Unpatched Vulnerability : CVE-2018-10873	Nessus	Misc.	2025/8/19	2026/8/5	high
288904	MiracleLinux 4 : spice-gtk-0.26-8.AXS4.1, spice-server-0.12.4-16.AXS4.1 (AXSA:2018-3326:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high
117623	Oracle Linux 7 : spice / and / spice-gtk (ELSA-2018-2731)	Nessus	Oracle Linux Local Security Checks	2018/9/21	2024/11/1	high
117626	RHEL 6 : spice-gtk and spice-server (RHSA-2018:2732)	Nessus	Red Hat Local Security Checks	2018/9/21	2024/11/5	high
118739	EulerOS 2.0 SP2 : spice (EulerOS-SA-2018-1356)	Nessus	Huawei Local Security Checks	2018/11/6	2024/7/26	high
112275	SUSE SLES12 Security Update : spice (SUSE-SU-2018:2584-1)	Nessus	SuSE Local Security Checks	2018/9/4	2024/8/12	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high