tocsin

Debian/spice: unknown

Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service (crash) via a long password in a SPICE ticket.

Action: Upgrade spice to 0.12.4-0nocelt2 or later.

Affected

introducedfixedlast affected
00.12.4-0nocelt2-

Fixed versions

0.12.4-0nocelt2

Sources

published · modified · JSON