7 results · Feed
-
Medium 4.4
Spice-vdagent: path traversal in file transfer via unsanitized filename
A path traversal vulnerability was found in spice-vdagent. This flaw allows a malicious or compromised SPICE host to write arbitrary files to any location on the guest operating system. This occurs because the filename provided by the SPICE host during file t…
-
Medium 5.1
Spice-vdagent: integer overflow in udscs_write() leading to heap buffer overflow
A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This vulnerability can lead to a heap buffer overflow, causing the spice-vdagent daemon to crash and resulting in …
-
Unscored —
A flaw was found in the spice-vdagentd daemon, where it did not properly handle client connections that can be establis…
-
Unscored —
A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw…
-
Unscored —
A flaw was found in the SPICE file transfer protocol. File data from the host system can end up in full or in parts in …
-
Unscored —
A flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system to the virtual machin…
-
Unscored —
spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing loca…