Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt. This may lead to a denial of service, or, in the worst case, code-execution by unauthenticated attackers.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2019-02-04T18:00:00Z
Updated: 2024-09-16T16:23:33.117Z
Reserved: 2019-01-03T00:00:00
Link: CVE-2019-3813
Vulnrichment
No data.
NVD
Status : Modified
Published: 2019-02-04T18:29:00.323
Modified: 2024-11-21T04:42:35.693
Link: CVE-2019-3813
Redhat