Skip to content
OpenAdvisories
Medium ALAS2-2023-2219 1 CVE

Moderate: spice-protocol security update (Amazon Linux 2)

Published Aug 21, 2023 · Updated Aug 23, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-10893: Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A malicious server could cause the client to crash or, potentially, execute arbitrary code.

Fixed packages 1

ReleasePackageFixed in
Amazon Linux · 2 spice-protocol 0:0.12.14-1.amzn2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2018-10893.html