Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-10893: Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A malicious server could cause the client to crash or, potentially, execute arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | libgovirt | 0:0.3.4-3.amzn2 |
| Amazon Linux · 2 | libgovirt-debuginfo | 0:0.3.4-3.amzn2 |
| Amazon Linux · 2 | libgovirt-devel | 0:0.3.4-3.amzn2 |
Vulnerabilities 1
-
High 7.6
Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-10893.html