CVE 2019-3813
Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt. This may lead to a denial of service, or, in the worst case, code-execution by unauthenticated attackers.
Related bugs and status
CVE-2019-3813 (Candidate) is related to these bugs:
Bug #1852439: merge 0.14.2-4 for additional fixes from Debian
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
1852439 | merge 0.14.2-4 for additional fixes from Debian | spice (Ubuntu) | Medium | Fix Released |
Bug #1906470: CVE-2019-11068: libxslt: bypass of protection mechanism
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
1906470 | CVE-2019-11068: libxslt: bypass of protection mechanism | StarlingX | High | Fix Released |
Bug #1906471: CVE-2019-17006: nss: crypto primitives missing length checks
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
1906471 | CVE-2019-17006: nss: crypto primitives missing length checks | StarlingX | High | Fix Released |
Bug #1908088: stx-tools: yum fails in Docker with misleading error messages
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
1908088 | stx-tools: yum fails in Docker with misleading error messages | StarlingX | Low | Fix Released |
Bug #1908297: populate_downloads.sh doesn't clean/backup old content
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
1908297 | populate_downloads.sh doesn't clean/backup old content | StarlingX | Low | Fix Released |
Bug #1908751: mirror-check.sh failes for layered build
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
1908751 | mirror-check.sh failes for layered build | StarlingX | Low | Triaged |
Bug #1910130: Build of 'compile' layer fails due to missing python3 dependencies
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
1910130 | Build of 'compile' layer fails due to missing python3 dependencies | StarlingX | Critical | Fix Released |
Bug #1912139: CVE-2018-19519: tcpdump: a stack-based buffer over-read
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
1912139 | CVE-2018-19519: tcpdump: a stack-based buffer over-read | StarlingX | Medium | Fix Released |
Bug #1912682: tools: Dockerfile: yum install silently ignores errors
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
1912682 | tools: Dockerfile: yum install silently ignores errors | StarlingX | Low | Fix Released |
Bug #1915050: IPv6: All hosts remain offline after booting off the controller-0
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
1915050 | IPv6: All hosts remain offline after booting off the controller-0 | StarlingX | Critical | Fix Released |
Bug #1917901: tb.sh create fails on rmdir /var/lib/mock
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
1917901 | tb.sh create fails on rmdir /var/lib/mock | StarlingX | High | Fix Released |
Bug #1918154: CVE-2020-10878: perl: perl before 5.30.3 has an integer overflow
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
1918154 | CVE-2020-10878: perl: perl before 5.30.3 has an integer overflow | StarlingX | High | Fix Released |
Bug #1918477: download_mirror.sh is slow
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
1918477 | download_mirror.sh is slow | StarlingX | High | Fix Released |
Bug #1920024: linuxsoft.cern.ch is no longer responding
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
1920024 | linuxsoft.cern.ch is no longer responding | StarlingX | High | Fix Released |
Bug #1923458: basearch not always set
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
1923458 | basearch not always set | StarlingX | Medium | Fix Released |
Bug #1924691: systemd sends tons of useless PropertiesChanged messages when a mount happens
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
1924691 | systemd sends tons of useless PropertiesChanged messages when a mount happens | StarlingX | Medium | Fix Released |
Bug #1926372: CVE-2021-26937 screen segfault
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
1926372 | CVE-2021-26937 screen segfault | StarlingX | High | Fix Released |
Bug #1926987: Download_mirror.sh fails on 'flockflock'
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
1926987 | Download_mirror.sh fails on 'flockflock' | StarlingX | Critical | Fix Released |
Bug #1927137: Docker build env fails on git-review
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
1927137 | Docker build env fails on git-review | StarlingX | Critical | Fix Released |
See the
CVE page on Mitre.org
for more details.