CVE-2018-10893 Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A malicious server could cause the client to crash or, potentially, execute arb...
HighCVSS 8.8
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A malicious server could cause the client to crash or, potentially, execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/spice-gtk(Debian:12) | < 0.37-1 | 0.37-1 |
| debian/spice-gtk(Debian:13) | < 0.37-1 | 0.37-1 |
| debian/spice-gtk(Debian:14) | < 0.37-1 | 0.37-1 |
| spice project spice | All versions | No fix listed |
| ubuntu/spice-gtk(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/spice-gtk(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/spice-gtk(Ubuntu:26.10) | All versions | No fix listed |
| redhat spice-client | All versions | No fix listed |
| ubuntu/spice-gtk(Ubuntu:22.04) | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2018-10893 vendor-advisory
- RHSA-2019:2229 vendor-advisory
- RHSA-2020:0471 vendor-advisory
- bugzilla.redhat.com issue-tracking patch third-party-advisory
- [spice-devel] 20180703 [PATCH spice-common v3] lz: Avoid buffer reading overflow checking for image type mailing-list patch third-party-advisory
- bugs.debian.org issue-tracking