Summary
[0.12.4-9.1]
- Avoid race conditions reading monitor configs from guest. This race could
trigger memory corruption host-side
Resolves: rhbz#1239127
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | spice-server | 0:0.12.4-9.el7_1.1 |
| Oracle Linux · 7 | spice-server-devel | 0:0.12.4-9.el7_1.1 |
Vulnerabilities 1
-
Unscored —
Race condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote authenticated guest user t…