| Package | Affected versions | Patched versions |
|---|---|---|
| enterprise virtualization | = 3.0 | |
| spice | = 0.12.0 |
Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service (crash) via a long password in a SPICE ticket.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free