Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2019-3813 PUBLISHED CVSS 7.5 HIGH

Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt. This may lead to a denial of service, or, in the worst case, code-execution by unauthenticated attackers.

Risk Scores

CVSS v3.1
7.5
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Alpine:v3.12spice0, 0.12.8-r1, 0.12.8-r2
Alpine:v3.13spice0.12.6-r1, 0.12.5-r2, 0.12.8-r3
Alpine:v3.14spice0.12.8-r2, 0.12.5-r0, 0.12.8-r4
Alpine:v3.9spice0.12.5-r1, 0.12.5-r0, 0.12.4-r0
Alpine:v3.6spice0.12.7-r0, 0.12.8-r1, 0.12.8-r2
Alpine:v3.19spice0.14.1-r0, 0.14.1-r3, 0.10.1-r0
Alpine:v3.20spice0.14.0-r6, 0.12.8-r2, 0.12.8-r1
Alpine:v3.22spice0.12.6-r1, 0.10.0-r0, 0.10.0-r1
Alpine:v3.16spice0.12.3-r0, 0, 0.10.0-r1
Alpine:v3.11spice0.12.7-r0, 0.12.7-r1, 0.12.8-r0
Alpine:v3.7spice0.12.7-r1, 0.12.7-r0, 0.12.6-r1
Alpine:v3.8spice0.12.5-r1, 0.12.2-r1, 0.12.5-r0
Alpine:v3.10spice0.13.3-r0, 0.13.3-r1, 0.14.0-r4
Alpine:v3.17spice0.12.8-r0, 0.12.5-r1, 0.10.0-r0
Alpine:v3.18spice0.12.7-r1, 0.12.8-r0, 0.12.8-r1
Alpine:v3.23spice0.13.3-r1, 0.12.8-r1, 0.12.5-r1
Alpine:v3.15spice0.14.0-r6, 0, 0.10.0-r1
Alpine:v3.21spice0.12.8-r4, 0.12.8-r2, 0.12.8-r1

Timeline

References

Open in Interactive Console →