MGASA-2020-0474

Dashboard / Vulnerabilities / MGASA-2020-0474

MGASA-2020-0474

Summary: Updated spice-vdagent package fixes security vulnerabilities

Details: Matthias Gerstner discovered that SPICE vdagent incorrectly handled the active_xfers hash table. A local attacker could possibly use this issue to cause SPICE vdagent to consume memory, resulting in a denial of service (CVE-2020-25650). Matthias Gerstner discovered that SPICE vdagent incorrectly handled the active_xfers hash table. A local attacker could possibly use this issue to cause SPICE vdagent to consume memory, resulting in a denial of service, or obtain sensitive file contents (CVE-2020-25651). Matthias Gerstner discovered that SPICE vdagent incorrectly handled a large number of client connections. A local attacker could possibly use this issue to cause SPICE vdagent to consume resources, resulting in a denial of service (CVE-2020-25652). Matthias Gerstner discovered that SPICE vdagent incorrectly handled client connections. A local attacker could possibly use this issue to obtain sensitive information, paste clipboard contents, and transfer files into the active session (CVE-2020-25653).

References: https://advisories.mageia.org/MGASA-2020-0474.html, https://bugs.mageia.org/show_bug.cgi?id=27568, https://ubuntu.com/security/notices/USN-4617-1, https://www.openwall.com/lists/oss-security/2020/11/04/1