CVE-2017-7506: Buffer Overflow
For authenticated client it is possible to cause buffer overflow via sending invalid monitor configurations.
Proposed patch:
https://bugzilla.redhat.com/attachment.cgi?id=1279035
Product bug:
https://bugzilla.redhat.com/showbug.cgi?id=1451021
Other sources
spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7506?
CVE-2017-7506 has a moderate severity rating due to the potential for buffer overflow in the affected Spice versions.
How do I fix CVE-2017-7506?
To fix CVE-2017-7506, update the Spice software to a version that includes the patch for this vulnerability.
What versions are affected by CVE-2017-7506?
CVE-2017-7506 affects multiple versions of Spice ranging from 0.5.2 to 0.13.0.
Can CVE-2017-7506 be exploited remotely?
CVE-2017-7506 requires authenticated access to exploit, as it targets invalid monitor configurations sent by clients.
What are the potential impacts of CVE-2017-7506?
The potential impacts of CVE-2017-7506 include application crashes and possible arbitrary code execution due to buffer overflow.