SCIENTIFIC-LINUX-ERRATA Archives

February 2017

SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Security ERRATA Moderate: spice-server on SL6.x x86_64
From:
Pat Riehecky <[log in to unmask]>
Reply To:
[log in to unmask]
Date:
Mon, 6 Feb 2017 16:40:19 -0000
Content-Type:
text/plain
Parts/Attachments:
text/plain (27 lines) 
Synopsis:          Moderate: spice-server security update

Advisory ID:       SLSA-2017:0253-1

Issue Date:        2017-02-05

CVE Numbers:       CVE-2016-9578

                   CVE-2016-9577

--



Security Fix(es):



* A vulnerability was discovered in spice in the server's protocol

handling. An authenticated attacker could send crafted messages to the

spice server causing a heap overflow leading to a crash or possible code

execution. (CVE-2016-9577)



* A vulnerability was discovered in spice in the server's protocol

handling. An attacker able to connect to the spice server could send

crafted messages which would cause the process to crash. (CVE-2016-9578)

--



SL6

  x86_64

    spice-server-0.12.4-13.el6_8.2.x86_64.rpm

    spice-server-debuginfo-0.12.4-13.el6_8.2.x86_64.rpm

    spice-server-devel-0.12.4-13.el6_8.2.x86_64.rpm



- Scientific Linux Development Team

ATOM RSS1 RSS2