ID de Prueba:	1.3.6.1.4.1.25623.1.0.890825
Categoría:	Debian Local Security Checks
Título:	Debian LTS: Security Advisory for spice (DLA-825-1)
Resumen:	Several vulnerabilities were discovered in spice, a SPICE protocol;client and server library. The Common Vulnerabilities and Exposures;project identifies the following problems:;;CVE-2016-9577;;Frediano Ziglio of Red Hat discovered a buffer overflow;vulnerability in the main_channel_alloc_msg_rcv_buf function. An;authenticated attacker can take advantage of this flaw to cause a;denial of service (spice server crash), or possibly, execute;arbitrary code.;;CVE-2016-9578;;Frediano Ziglio of Red Hat discovered that spice does not properly;validate incoming messages. An attacker able to connect to the;spice server could send crafted messages which would cause the;process to crash.
Descripción:	Summary: Several vulnerabilities were discovered in spice, a SPICE protocol client and server library. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-9577 Frediano Ziglio of Red Hat discovered a buffer overflow vulnerability in the main_channel_alloc_msg_rcv_buf function. An authenticated attacker can take advantage of this flaw to cause a denial of service (spice server crash), or possibly, execute arbitrary code. CVE-2016-9578 Frediano Ziglio of Red Hat discovered that spice does not properly validate incoming messages. An attacker able to connect to the spice server could send crafted messages which would cause the process to crash. Affected Software/OS: spice on Debian Linux Solution: For Debian 7 'Wheezy', these problems have been fixed in version 0.11.0-1+deb7u4. We recommend that you upgrade your spice packages. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9577 BugTraq ID: 96040 http://www.securityfocus.com/bid/96040 Debian Security Information: DSA-3790 (Google Search) https://www.debian.org/security/2017/dsa-3790 RedHat Security Advisories: RHSA-2017:0253 http://rhn.redhat.com/errata/RHSA-2017-0253.html RedHat Security Advisories: RHSA-2017:0254 https://access.redhat.com/errata/RHSA-2017:0254 RedHat Security Advisories: RHSA-2017:0549 http://rhn.redhat.com/errata/RHSA-2017-0549.html RedHat Security Advisories: RHSA-2017:0552 https://access.redhat.com/errata/RHSA-2017:0552 Common Vulnerability Exposure (CVE) ID: CVE-2016-9578 BugTraq ID: 96118 http://www.securityfocus.com/bid/96118
Copyright	Copyright (C) 2018 Greenbone Networks GmbH http://greenbone.net

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.