Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2013-4282
HistoryNov 02, 2013 - 7:55 p.m.

CVE-2013-4282

2013-11-0219:55:04
CWE-119
redhat
web.nvd.nist.gov
47
cve-2013-4282
spice
buffer overflow
denial of service
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

7.4

Confidence

High

EPSS

0.084

Percentile

94.5%

JSON

Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service (crash) via a long password in a SPICE ticket.

Affected configurations

Nvd
Node
spice_projectspiceMatch0.12.0
Node
redhatenterprise_virtualizationMatch3.0
OR
redhatenterprise_linuxMatch5
OR
redhatenterprise_linuxMatch6.0
VendorProductVersionCPE
spice_projectspice0.12.0cpe:/a:spice_project:spice:0.12.0:::

Related

openvas 21
fedora 3
seebug 1
oraclelinux 2
veracode 1
nessus 17
suse 2
securityvulns 2
nvd 1
cvelist 1
ubuntu 1
ubuntucve 1
prion 1
centos 2
debiancve 1
redhat 3
mageia 1
debian 2
osv 1
openvas
openvas
Ubuntu Update for spice USN-2027-1
2013-11-18 00:00:00
CentOS Update for qspice CESA-2013:1474 centos5
2013-11-08 00:00:00
Fedora Update for spice FEDORA-2013-20340
2013-11-08 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: spice-0.12.4-3.fc18
2013-11-08 04:37:11
[SECURITY] Fedora 19 Update: spice-0.12.4-3.fc19
2013-11-08 04:35:57
[SECURITY] Fedora 20 Update: spice-0.12.4-3.fc20
2013-11-10 06:59:01
seebug
seebug
SPICE 'reds_handle_ticket()'ε‡½ζ•°θΏœη¨‹ζ‹’η»ζœεŠ‘ζΌζ΄ž
2013-10-31 00:00:00
oraclelinux
oraclelinux
qspice security update
2013-10-29 00:00:00
spice-server security update
2013-10-29 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:01:01
nessus
nessus
Mandriva Linux Security Advisory : spice (MDVSA-2014:016)
2014-01-23 00:00:00
Oracle Linux 5 : qspice (ELSA-2013-1474)
2013-10-30 00:00:00
Fedora 19 : spice-0.12.4-3.fc19 (2013-20340)
2013-11-08 00:00:00
suse
suse
Security update for spice (important)
2015-05-15 18:04:56
Security update for spice (important)
2015-05-16 01:04:53
securityvulns
securityvulns
SPICE library buffer overflow
2013-11-18 00:00:00
[USN-2027-1] SPICE vulnerability
2013-11-18 00:00:00
nvd
nvd
CVE-2013-4282
2013-11-02 19:55:04
cvelist
cvelist
CVE-2013-4282
2013-11-02 19:00:00
ubuntu
ubuntu
SPICE vulnerability
2013-11-12 00:00:00
ubuntucve
ubuntucve
CVE-2013-4282
2013-11-02 00:00:00
prion
prion
Stack overflow
2013-11-02 19:55:00
centos
centos
qspice security update
2013-10-29 20:25:52
spice security update
2013-10-30 02:12:05
debiancve
debiancve
CVE-2013-4282
2013-11-02 19:55:04
redhat
redhat
(RHSA-2013:1473) Important: spice-server security update
2013-10-29 00:00:00
(RHSA-2013:1474) Important: qspice security update
2013-10-29 00:00:00
(RHSA-2013:1460) Important: rhev-hypervisor6 security and bug fix update
2013-10-29 00:00:00
mageia
mageia
Updated spice packages fix a security vulnerability
2014-01-21 20:20:58
debian
debian
[SECURITY] [DSA 2839-1] spice security update
2014-01-08 14:41:30
[SECURITY] [DSA 2839-1] spice security update
2014-01-08 14:41:30
osv
osv
spice - denial of service
2014-01-08 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

7.4

Confidence

High

EPSS

0.084

Percentile

94.5%

JSON
Related for CVE-2013-4282
openvas21fedora3seebug1oraclelinux2veracode1nessus17suse2securityvulns2nvd1cvelist1ubuntu1ubuntucve1prion1centos2debiancve1redhat3mageia1debian2osv1