CVE-2017-7506
- Source
- https://cve.org/CVERecord?id=CVE-2017-7506
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-7506.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2017-7506
- Downstream
- Related
- Published
- 2017-07-18T15:29:00.173Z
- Modified
- 2026-02-02T16:22:43.948301Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.
- References
-
- http://www.debian.org/security/2017/dsa-3907
- http://www.openwall.com/lists/oss-security/2017/07/14/1
- http://www.securityfocus.com/bid/99583
- https://access.redhat.com/errata/RHSA-2017:2471
- https://access.redhat.com/errata/RHSA-2018:3522
- https://bugzilla.redhat.com/show_bug.cgi?id=1452606
- https://bugzilla.redhat.com/show_bug.cgi?id=1452606
- http://www.openwall.com/lists/oss-security/2017/07/14/1
Affected packages
Git / gitlab.freedesktop.org/spice/spice
Affected ranges
- Type
- GIT
- Repo
- https://gitlab.freedesktop.org/spice/spice
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affected