High USN-3751-1 1 CVE

spice, spice-protocol vulnerability

Published Aug 22, 2018 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Spice incorrectly handled certain messages.
An attacker could possibly use this issue to cause a denial of service.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 14.04 LTS 14.04:LTS	spice	0.12.4-0nocelt2ubuntu1.7
Ubuntu · 16.04 LTS 16.04:LTS	spice-protocol	0.12.10-1ubuntu0.2
Ubuntu · 18.04 LTS 18.04:LTS	spice	0.14.0-1ubuntu2.2

Vulnerabilities 1

High 8.3

CVE-2018-10873

A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages …

[UNKNOWN] spice: spice spice Debian Ubuntu Alpine

Aug 17, 2018

References

report
https://ubuntu.com/security/CVE-2018-10873