| Package | Affected versions | Patched versions |
|---|---|---|
| spice | ≥ 0.5.2, ≤ 0.14.1 |
Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt. This may lead to a denial of service, or, in the worst case, code-execution by unauthenticated attackers.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free