Summary
[0.14.0-6.0.2.1]
- Add ARM support
[0.14.0-6.1]
- Fix off-by-one error during guest-to-host memory address conversion
Resolves: CVE-2019-3813
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | spice-server | 0:0.14.0-6.0.2.el7_6.1 |
| Oracle Linux · 7 | spice-server-devel | 0:0.14.0-6.0.2.el7_6.1 |
Vulnerabilities 1
-
Unscored —
Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get…