CVE-2020-23793: High severity spice-server vulnerability
An issue was discovered in spice-server spice-server-0.14.0-6.el76.1.x8664 of Redhat's VDI product. There is a security vulnerablility that can restart KVMvirtual machine without any authorization. It is not yet known if there will be other other effects.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-23793?
CVE-2020-23793 is a security vulnerability in spice-server-0.14.0-6.el7_6.1.x86_64 of Redhat's VDI product that allows unauthorized restart of KVM virtual machines.
How severe is CVE-2020-23793?
CVE-2020-23793 has a severity rating of 8.6, which is considered high.
How can CVE-2020-23793 affect my system?
CVE-2020-23793 can potentially disrupt the operation of KVM virtual machines by allowing unauthorized restarts.
Is there a known fix for CVE-2020-23793?
At the moment, there is no known fix for CVE-2020-23793. It is recommended to monitor the official Redhat's VDI product updates for patches or security advisories.
Where can I find more information about CVE-2020-23793?
More information about CVE-2020-23793 can be found at this reference: https://github.com/zelat/spice-security-issues