Red Hat Security Advisory: rhevm-spice-client security, bug fix, and enhancement update

Fixed packages 5

Vulnerabilities 9

• Unscored —
  CVE-2008-3520

  Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a cr…

  ghostscript Debian
  Oct 2, 2008
• Unscored —
  CVE-2008-3522

  Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer 1.900.1 might allow context-…

  ghostscript Debian
  Oct 2, 2008
• Unscored —
  CVE-2011-4516 EPSS 10%

  Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remo…

  ghostscript Debian
  Dec 15, 2011
• Unscored —
  CVE-2011-4517 EPSS 10%

  The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain …

  ghostscript Debian
  Dec 15, 2011
• Unscored —
  CVE-2014-8137 EPSS 15%

  Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers …

  jasper Ubuntu
  Dec 24, 2014
• Unscored —
  CVE-2014-8138 EPSS 19%

  Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a …

  jasper Ubuntu
  Dec 24, 2014
• Unscored —
  CVE-2014-8157 EPSS 17%

  Off-by-one error in the jpc_dec_process_sot function in JasPer 1.900.1 and earlier allows remote attackers to cause a d…

  jasper Ubuntu
  Jan 26, 2015
• Unscored —
  CVE-2014-8158 EPSS 14%

  Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a den…

  jasper Ubuntu
  Jan 26, 2015
• Unscored —
  CVE-2014-9029 EPSS 18%

  Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc/jpc_dec.c in…

  jasper Ubuntu
  Dec 8, 2014

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=461476
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=461478
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=747726
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1167537
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1172126
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1173157
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1173162
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1179282
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1179298
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1187270
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0698.json
• report
  https://access.redhat.com/security/cve/CVE-2008-3520
• advisory
  https://www.cve.org/CVERecord?id=CVE-2008-3520
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2008-3520
• report
  https://access.redhat.com/security/cve/CVE-2008-3522
• advisory
  https://www.cve.org/CVERecord?id=CVE-2008-3522
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2008-3522
• report
  https://access.redhat.com/security/cve/CVE-2011-4516
• advisory
  https://www.cve.org/CVERecord?id=CVE-2011-4516
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2011-4516
• report
  https://access.redhat.com/security/cve/CVE-2011-4517
• advisory
  https://www.cve.org/CVERecord?id=CVE-2011-4517
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2011-4517
• report
  https://access.redhat.com/security/cve/CVE-2014-8137
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-8137
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-8137
• article
  http://www.ocert.org/advisories/ocert-2014-012.html
• report
  https://access.redhat.com/security/cve/CVE-2014-8138
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-8138
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-8138
• report
  https://access.redhat.com/security/cve/CVE-2014-8157
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-8157
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-8157
• article
  http://www.ocert.org/advisories/ocert-2015-001.html
• report
  https://access.redhat.com/security/cve/CVE-2014-8158
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-8158
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-8158
• report
  https://access.redhat.com/security/cve/CVE-2014-9029