AZL-7365

Dashboard / Vulnerabilities / AZL-7365

AZL-7365

Summary: CVE-2020-25653 affecting package spice-vdagent for versions less than 0.22.1-1

Details: A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw may allow an unprivileged local guest user to become the active agent for spice-vdagentd, possibly resulting in a denial of service or information leakage from the host. The highest threat from this vulnerability is to data confidentiality as well as system availability. This flaw affects spice-vdagent versions 0.20 and prior.

References: https://nvd.nist.gov/vuln/detail/CVE-2020-25653