CVE-2013-4282

SPICE 0.12.0 - Denial of Service via Long Password in SPICE Ticket

Title source: llm

Description

Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service (crash) via a long password in a SPICE ticket.

References (8)

Core 8

Core References

Vendor Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2013-1473.html

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00008.html

Vendor Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2013-1474.html

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2014/dsa-2839

Exploit, Patch x_refsource_confirm

http://cgit.freedesktop.org/spice/spice/commit/?id=8af619009660b24e0b41ad26b30289eea288fcc2

Vendor Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2013-1460.html

Vendor Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-2027-1

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/63408

Scores

EPSS 0.0273

EPSS Percentile 84.4%

Details

CWE

CWE-119

Status published

Products (4)

redhat/enterprise_linux 5

redhat/enterprise_linux 6.0

redhat/enterprise_virtualization 3.0

spice_project/spice 0.12.0

Published Nov 02, 2013

Tracked Since Feb 18, 2026