spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.

The remote NewStart CGSL host, running version MAIN 4.05, has spice-server packages installed that are affected by multiple vulnerabilities:

  - A vulnerability was discovered in spice server's     protocol handling. An authenticated attacker could send     specially crafted messages to the spice server, causing     out-of-bounds memory accesses, leading to parts of     server memory being leaked or a crash. (CVE-2017-7506)

  - A vulnerability was discovered in SPICE where the     generated code used for demarshalling messages lacked     sufficient bounds checks. A malicious client or server,     after authentication, could send specially crafted     messages to its peer which would result in a crash or,     potentially, other impacts. (CVE-2018-10873)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update for spice-server is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The Simple Protocol for Independent Computing Environments (SPICE) is a remote display protocol for virtual environments. SPICE users can access a virtualized desktop or server from the local system or any system with network access to the server. SPICE is used in Red Hat Enterprise Linux for viewing virtualized guests running on the Kernel-based Virtual Machine (KVM) hypervisor or on Red Hat Enterprise Virtualization Hypervisors.

Security Fix(es) :

* spice: Possible buffer overflow via invalid monitor configurations (CVE-2017-7506)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

This issue was discovered by Frediano Ziglio (Red Hat).

Note that Tenable Network Security has attempted to extract the preceding description block directly from the corresponding Red Hat security advisory. Virtuozzo provides no description for VZLSA advisories. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for spice-server is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The Simple Protocol for Independent Computing Environments (SPICE) is a remote display protocol for virtual environments. SPICE users can access a virtualized desktop or server from the local system or any system with network access to the server. SPICE is used in Red Hat Enterprise Linux for viewing virtualized guests running on the Kernel-based Virtual Machine (KVM) hypervisor or on Red Hat Enterprise Virtualization Hypervisors.

Security Fix(es) :

* spice: Possible buffer overflow via invalid monitor configurations (CVE-2017-7506)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

This issue was discovered by Frediano Ziglio (Red Hat).

Security Fix(es) :

  - spice: Possible buffer overflow via invalid monitor     configurations (CVE-2017-7506)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-3522 advisory.

    - Prevent potential buffer/integer overflows with invalid MonitorsConfig messages       sent from an authenticated client       Resolves: CVE-2017-7506

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:3522 advisory.

    The Simple Protocol for Independent Computing Environments (SPICE) is a remote display protocol for     virtual environments. SPICE users can access a virtualized desktop or server from the local system or any     system with network access to the server. SPICE is used in Red Hat Enterprise Linux for viewing     virtualized guests running on the Kernel-based Virtual Machine (KVM) hypervisor or on Red Hat Enterprise     Virtualization Hypervisors.

    Security Fix(es):

    * spice: Possible buffer overflow via invalid monitor configurations (CVE-2017-7506)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

    This issue was discovered by Frediano Ziglio (Red Hat).

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for spice fixes the following security issues :

  - CVE-2017-7506: Fixed an out-of-bounds memory access when     processing specially crafted messages from authenticated     attacker to the spice server resulting into crash and/or     server memory leak (bsc#1046779).

This update was imported from the SUSE:SLE-12-SP3:Update update project.

This update for spice fixes the following security issues :

  - CVE-2017-7506: Fixed an out-of-bounds memory access when     processing specially crafted messages from authenticated     attacker to the spice server resulting into crash and/or     server memory leak (bsc#1046779).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A vulnerability was discovered in spice server's     protocol handling. An authenticated attacker could send     specially crafted messages to the spice server, causing     out-of-bounds memory accesses, leading to parts of     server memory being leaked or a crash. (CVE-2017-7506)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for spice is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The Simple Protocol for Independent Computing Environments (SPICE) is a remote display system built for virtual environments which allows the user to view a computing 'desktop' environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures.

Security Fix(es) :

* A vulnerability was discovered in spice server's protocol handling.
An authenticated attacker could send specially crafted messages to the spice server, causing out-of-bounds memory accesses, leading to parts of server memory being leaked or a crash. (CVE-2017-7506)

This issue was discovered by Frediano Ziglio (Red Hat).

Security Fix(es) :

  - A vulnerability was discovered in spice server's     protocol handling. An authenticated attacker could send     specially crafted messages to the spice server, causing     out-of-bounds memory accesses, leading to parts of     server memory being leaked or a crash. (CVE-2017-7506)

This issue was discovered by Frediano Ziglio (Red Hat).

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2471 advisory.

    - Redo build properly versioned as a zstream build       Related: CVE-2017-7506

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Security fix for CVE-2017-7506

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3355-1 advisory.

    Frediano Ziglio discovered that Spice incorrectly handled certain invalid monitor configurations. A remote     attacker could use this issue to cause Spice to crash, resulting in a denial of service, or possibly     execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for spice fixes the following issues :

  - CVE-2017-7506: A possible buffer overflow via invalid     monitor configurations (bsc#1046779)

This update was imported from the SUSE:SLE-12-SP2:Update update project.

This update for spice fixes the following issues :

  - CVE-2017-7506: A possible buffer overflow via invalid     monitor configurations (bsc#1046779)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Frediano Ziglio discovered a buffer overflow in spice, a SPICE protocol client and server library which may result in memory disclosure, denial of service and potentially the execution of arbitrary code.

ID	Name	Product	Family	Severity
127410	NewStart CGSL MAIN 4.05 : spice-server Multiple Vulnerabilities (NS-SA-2019-0144)	Nessus	NewStart CGSL Local Security Checks	high
119092	Virtuozzo 6 : spice-server / spice-server-devel (VZLSA-2018-3522)	Nessus	Virtuozzo Local Security Checks	high
119049	CentOS 6 : spice-server (CESA-2018:3522)	Nessus	CentOS Local Security Checks	high
118853	Scientific Linux Security Update : spice-server on SL6.x x86_64 (20181108)	Nessus	Scientific Linux Local Security Checks	high
118850	Oracle Linux 6 : spice-server (ELSA-2018-3522)	Nessus	Oracle Linux Local Security Checks	high
118816	RHEL 6 : spice-server (RHSA-2018:3522)	Nessus	Red Hat Local Security Checks	high
103590	openSUSE Security Update : spice (openSUSE-2017-1110)	Nessus	SuSE Local Security Checks	high
103454	SUSE SLED12 / SLES12 Security Update : spice (SUSE-SU-2017:2552-1)	Nessus	SuSE Local Security Checks	high
103084	EulerOS 2.0 SP2 : spice (EulerOS-SA-2017-1226)	Nessus	Huawei Local Security Checks	high
102765	CentOS 7 : spice (CESA-2017:2471)	Nessus	CentOS Local Security Checks	high
102672	Scientific Linux Security Update : spice on SL7.x x86_64 (20170815)	Nessus	Scientific Linux Local Security Checks	high
102517	RHEL 7 : spice (RHSA-2017:2471)	Nessus	Red Hat Local Security Checks	high
102512	Oracle Linux 7 : spice (ELSA-2017-2471)	Nessus	Oracle Linux Local Security Checks	high
101866	Fedora 24 : spice (2017-61689edaf4)	Nessus	Fedora Local Security Checks	high
101834	Ubuntu 14.04 LTS / 16.04 LTS : Spice vulnerability (USN-3355-1)	Nessus	Ubuntu Local Security Checks	high
101515	openSUSE Security Update : spice (openSUSE-2017-805)	Nessus	SuSE Local Security Checks	high
101394	SUSE SLES12 Security Update : spice (SUSE-SU-2017:1839-1)	Nessus	SuSE Local Security Checks	high
101392	SUSE SLES11 Security Update : spice (SUSE-SU-2017:1837-1)	Nessus	SuSE Local Security Checks	high
101391	SUSE SLED12 / SLES12 Security Update : spice (SUSE-SU-2017:1836-1)	Nessus	SuSE Local Security Checks	high
101389	SUSE SLES12 Security Update : spice (SUSE-SU-2017:1832-1)	Nessus	SuSE Local Security Checks	high
101380	Debian DSA-3907-1 : spice - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2017-7506

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high