tocsin

Debian/spice-vdagent: medium 5.1

A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This vulnerability can lead to a heap buffer overflow,

Action: Upgrade spice-vdagent to 0.22.1-3+deb12u1 or later.

Affected

introducedfixedlast affected
00.22.1-3+deb12u1-

Fixed versions

0.22.1-3+deb12u1

Sources

published · modified · JSON