Test ID:	1.3.6.1.4.1.25623.1.0.883004
Category:	CentOS Local Security Checks
Title:	CentOS Update for spice-server CESA-2019:0232 centos6
Summary:	The remote host is missing an update for the 'spice-server'; package(s) announced via the CESA-2019:0232 advisory.
Description:	Summary: The remote host is missing an update for the 'spice-server' package(s) announced via the CESA-2019:0232 advisory. Vulnerability Insight: The Simple Protocol for Independent Computing Environments (SPICE) is a remote display protocol for virtual environments. SPICE users can access a virtualized desktop or server from the local system or any system with network access to the server. SPICE is used in Red Hat Enterprise Linux for viewing virtualized guests running on the Kernel-based Virtual Machine (KVM) hypervisor or on Red Hat Enterprise Virtualization Hypervisors. Security Fix(es): * spice: Off-by-one error in array access in spice/server/memslot.c (CVE-2019-3813) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. This issue was discovered by Christophe Fergeau (Red Hat). Affected Software/OS: spice-server on CentOS 6. Solution: Please install the updated package(s). CVSS Score: 5.4 CVSS Vector: AV:A/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-3813 BugTraq ID: 106801 http://www.securityfocus.com/bid/106801 Debian Security Information: DSA-4375 (Google Search) https://www.debian.org/security/2019/dsa-4375 https://security.gentoo.org/glsa/202007-30 https://lists.debian.org/debian-lts-announce/2019/01/msg00026.html RedHat Security Advisories: RHSA-2019:0231 https://access.redhat.com/errata/RHSA-2019:0231 RedHat Security Advisories: RHSA-2019:0232 https://access.redhat.com/errata/RHSA-2019:0232 RedHat Security Advisories: RHSA-2019:0457 https://access.redhat.com/errata/RHSA-2019:0457 https://usn.ubuntu.com/3870-1/
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.