CVE-2018-10873: Buffer Overflow
A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts.
Other sources
SPICE has a vulnerability caused by a missing check in pythonmodules/demarshal.py:writevalidatearrayitem() which results in generated demarshalling code being vulnerable to multiple buffer overflows. An attacker could exploit this to cause a denial of service.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2018-10873.
What is the severity of CVE-2018-10873?
The severity of CVE-2018-10873 is high, with a severity value of 8.8.
Which software is affected by CVE-2018-10873?
SPICE before version 0.14.1 and spice-gtk before version 0.36 are affected by CVE-2018-10873.
How can a malicious client or server exploit CVE-2018-10873?
A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or potential exploitation.
What is the remedy for CVE-2018-10873?
The remedy for CVE-2018-10873 is to upgrade to SPICE version 0.14.1 or higher.