Test ID:	1.3.6.1.4.1.25623.1.0.890825
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DLA-825-1)
Summary:	The remote host is missing an update for the Debian 'spice' package(s) announced via the DLA-825-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'spice' package(s) announced via the DLA-825-1 advisory. Vulnerability Insight: Several vulnerabilities were discovered in spice, a SPICE protocol client and server library. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-9577 Frediano Ziglio of Red Hat discovered a buffer overflow vulnerability in the main_channel_alloc_msg_rcv_buf function. An authenticated attacker can take advantage of this flaw to cause a denial of service (spice server crash), or possibly, execute arbitrary code. CVE-2016-9578 Frediano Ziglio of Red Hat discovered that spice does not properly validate incoming messages. An attacker able to connect to the spice server could send crafted messages which would cause the process to crash. For Debian 7 Wheezy, these problems have been fixed in version 0.11.0-1+deb7u4. We recommend that you upgrade your spice packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: [link moved to references] Affected Software/OS: 'spice' package(s) on Debian 7. Solution: Please install the updated package(s). CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9577 BugTraq ID: 96040 http://www.securityfocus.com/bid/96040 Debian Security Information: DSA-3790 (Google Search) https://www.debian.org/security/2017/dsa-3790 RedHat Security Advisories: RHSA-2017:0253 http://rhn.redhat.com/errata/RHSA-2017-0253.html RedHat Security Advisories: RHSA-2017:0254 https://access.redhat.com/errata/RHSA-2017:0254 RedHat Security Advisories: RHSA-2017:0549 http://rhn.redhat.com/errata/RHSA-2017-0549.html RedHat Security Advisories: RHSA-2017:0552 https://access.redhat.com/errata/RHSA-2017:0552 Common Vulnerability Exposure (CVE) ID: CVE-2016-9578 BugTraq ID: 96118 http://www.securityfocus.com/bid/96118
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.