CVE-2010-0428

2010-08-2418:00:01

Debian Security Bug Tracker

security-tracker.debian.org

CVSS2

6.6

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:S/C:C/I:C/A:C

EPSS

0.001

Percentile

20.8%

JSON

libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly validate guest QXL driver pointers, which allows guest OS users to cause a denial of service (invalid pointer dereference and guest OS crash) or possibly gain privileges via unspecified vectors.

OSVersionArchitecturePackageVersionFilename
Debian12allspice< 0.15.1-1spice_0.15.1-1_all.deb
Debian11allspice< 0.14.3-2.1spice_0.14.3-2.1_all.deb
Debian999allspice< 0.15.2-1spice_0.15.2-1_all.deb
Debian13allspice< 0.15.2-1spice_0.15.2-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	spice	< 0.15.1-1	spice_0.15.1-1_all.deb
Debian	11	all	spice	< 0.14.3-2.1	spice_0.14.3-2.1_all.deb
Debian	999	all	spice	< 0.15.2-1	spice_0.15.2-1_all.deb
Debian	13	all	spice	< 0.15.2-1	spice_0.15.2-1_all.deb