CVE-2013-4282 Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service (crash) via a long password in a SPICE ticket.
MediumCVSS 5.0
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service (crash) via a long password in a SPICE ticket.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/spice(Debian:12) | < 0.12.4-0nocelt2 | 0.12.4-0nocelt2 |
| debian/spice(Debian:13) | < 0.12.4-0nocelt2 | 0.12.4-0nocelt2 |
| debian/spice(Debian:14) | < 0.12.4-0nocelt2 | 0.12.4-0nocelt2 |
| spice project spice | = 0.12.0 | No fix listed |
| redhat enterprise virtualization | = 3.0 | No fix listed |
| redhat enterprise linux | = 5 | No fix listed |
| redhat enterprise linux | = 6.0 | No fix listed |
References
- Debian Security Tracker CVE-2013-4282 vendor-advisory
- cgit.freedesktop.org exploit patch
- SUSE-SU-2015:0884 vendor-advisory
- RHSA-2013:1460 vendor-advisory
- RHSA-2013:1473 vendor-advisory
- RHSA-2013:1474 vendor-advisory
- DSA-2839 vendor-advisory
- 63408 vdb-entry
- USN-2027-1 vendor-advisory
- bugs.debian.org issue-tracking