CVE-2020-25652: Medium severity red hat spice-vdagent vulnerability
A flaw was found in the spice-vdagentd daemon, where it did not properly handle client connections that can be established via the UNIX domain socket in /run/spice-vdagentd/spice-vdagent-sock. Any unprivileged local guest user could use this flaw to prevent legitimate agents from connecting to the spice-vdagentd daemon, resulting in a denial of service. The highest threat from this vulnerability is to system availability. This flaw affects spice-vdagent versions 0.20 and prior.
Other sources
The following flaw was reported by SUSE Security:
spice-vdagentd does not apply a limit to the amount of client connections that can be established via the UNIX domain socket in /run/spice-vdagentd/spice-vdagent-sock. Also existing connections aren't subject to a timeout or any kind of preconditions for them to stay alive. Any local user in the VM can prevent legitimate spice-vdagent instances from connecting to the spice-vdagentd daemon. spice-vdagentd will become unable to open further connections for legitimate clients or perform other tasks.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-25652?
CVE-2020-25652 is a vulnerability found in the spice-vdagentd daemon that allows unprivileged local guest users to prevent legitimate agents from connecting via the UNIX domain socket.
How severe is CVE-2020-25652?
CVE-2020-25652 has a severity rating of 5.5, which is considered medium.
Which software is affected by CVE-2020-25652?
The affected software includes spice-vdagent version up to and including 0.20.0, Debian Linux 9.0, Fedora 32, and Fedora 33.
How can I fix CVE-2020-25652?
To fix CVE-2020-25652, you should update the spice-vdagent package to version 0.21.0 or later.
Where can I find more information about CVE-2020-25652?
You can find more information about CVE-2020-25652 on Red Hat Bugzilla, Debian LTS Announce, and Fedora Project.