Skip to content
OpenAdvisories
Unscored RHSA-2013:1473 1 CVE

Red Hat Security Advisory: spice-server security update

Published Sep 13, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client spice-server 0:0.12.0-12.el6_4.5
Red Hat · RHEL 6 enterprise_linux:6::client spice-server-debuginfo 0:0.12.0-12.el6_4.5
Red Hat · RHEL 6 enterprise_linux:6::client spice-server-devel 0:0.12.0-12.el6_4.5
Red Hat · RHEL 6 enterprise_linux:6::computenode spice-server 0:0.12.0-12.el6_4.5
Red Hat · RHEL 6 enterprise_linux:6::computenode spice-server-debuginfo 0:0.12.0-12.el6_4.5
Red Hat · RHEL 6 enterprise_linux:6::computenode spice-server-devel 0:0.12.0-12.el6_4.5
Red Hat · RHEL 6 enterprise_linux:6::server spice-server 0:0.12.0-12.el6_4.5
Red Hat · RHEL 6 enterprise_linux:6::server spice-server-debuginfo 0:0.12.0-12.el6_4.5
Red Hat · RHEL 6 enterprise_linux:6::server spice-server-devel 0:0.12.0-12.el6_4.5
Red Hat · RHEL 6 enterprise_linux:6::workstation spice-server 0:0.12.0-12.el6_4.5
Red Hat · RHEL 6 enterprise_linux:6::workstation spice-server-debuginfo 0:0.12.0-12.el6_4.5
Red Hat · RHEL 6 enterprise_linux:6::workstation spice-server-devel 0:0.12.0-12.el6_4.5

Vulnerabilities 1

  • Unscored —
    CVE-2013-4282

    Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers…

    spice spice Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1000443
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1473.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-4282
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4282
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4282