A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact Low

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.0127.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
[UNKNOWN] spice: affected
Version Status Constraints
0.14.1 affected —

Configuration 1 [-]

cpe:2.3:a:spice_project:spice:*:*:*:*:*:*:*:*

Configuration 2 [-]

OR cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Configuration 3 [-]

OR cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

Configuration 4 [-]

OR cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 6
spice-gtk-0:0.26-8.el6_10.1 cpe:/o:redhat:enterprise_linux:6 RHSA-2018:2732 2018-09-20T00:00:00Z
spice-server-0:0.12.4-16.el6_10.1 cpe:/o:redhat:enterprise_linux:6 RHSA-2018:2732 2018-09-20T00:00:00Z
Red Hat Enterprise Linux 7
spice-0:0.14.0-2.el7_5.5 cpe:/o:redhat:enterprise_linux:7 RHSA-2018:2731 2018-09-20T00:00:00Z
spice-gtk-0:0.34-3.el7_5.2 cpe:/o:redhat:enterprise_linux:7 RHSA-2018:2731 2018-09-20T00:00:00Z
Red Hat Virtualization 4 for Red Hat Enterprise Linux 7
imgbased-0:1.0.29-1.el7ev cpe:/o:redhat:enterprise_linux:7::hypervisor RHSA-2018:3470 2018-11-05T00:00:00Z
redhat-release-virtualization-host-0:4.2-7.3.el7 cpe:/o:redhat:enterprise_linux:7::hypervisor RHSA-2018:3470 2018-11-05T00:00:00Z
redhat-virtualization-host-0:4.2-20181026.0.el7_6 cpe:/o:redhat:enterprise_linux:7::hypervisor RHSA-2018:3470 2018-11-05T00:00:00Z

No data.

Project Subscriptions

Vendors Products
Canonical Subscribe
Ubuntu Linux Subscribe
Debian Subscribe
Debian Linux Subscribe
Redhat Subscribe
Enterprise Linux Subscribe
Enterprise Linux Desktop Subscribe
Enterprise Linux Server Subscribe
Enterprise Linux Server Aus Subscribe
Enterprise Linux Server Eus Subscribe
Enterprise Linux Server Tus Subscribe
Enterprise Linux Workstation Subscribe
Virtualization Subscribe
Virtualization Host Subscribe
Spice Project Subscribe
Spice Subscribe
Advisories
Source ID Title
Debian DLA Debian DLA DLA-1486-1 spice security update
Debian DLA Debian DLA DLA-1488-1 spice security update
Debian DLA Debian DLA DLA-1489-1 spice-gtk security update
Debian DSA Debian DSA DSA-4319-1 spice security update
EUVD EUVD EUVD-2018-2939 A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts.
Ubuntu USN Ubuntu USN USN-3751-1 Spice vulnerability
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
http://www.securityfocus.com/bid/105152 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2018:2731 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2018:2732 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2018:3470 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10873 cve-icon cve-icon
https://gitlab.freedesktop.org/spice/spice-common/commit/bb15d4815ab586b4c4a20f4a565970a44824c42c cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2018/08/msg00035.html cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2018/08/msg00037.html cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2018/08/msg00038.html cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2018-10873 cve-icon
https://usn.ubuntu.com/3751-1/ cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2018-10873 cve-icon
https://www.debian.org/security/2018/dsa-4319 cve-icon cve-icon
History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-08-05T07:46:47.325Z

Reserved: 2018-05-09T00:00:00

Link: CVE-2018-10873

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-08-17T12:29:00.253

Modified: 2024-11-21T03:42:11.517

Link: CVE-2018-10873

cve-icon Redhat

Severity : Important

Publid Date: 2018-08-16T00:00:00Z

Links: CVE-2018-10873 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses