Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [day] [month] [year] [list]
Date: Fri, 14 Jul 2017 09:36:21 +0200
From: Kristian Fiskerstrand <k_f@...too.org>
To: oss-security@...ts.openwall.com
Subject: CVE-2017-7506 spice: Possible buffer overflow via invalid monitor
 configurations

The following issue was brought to the distros list during the embargo
period. As per list policy this is the mandatory oss-security posting.

###

> CVE-2017-7506 spice: Possible buffer overflow via invalid monitor
configurations

CVSSv3:  9.1/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H

The vulnerability is exposed to authenticated clients.  Malicious SPICE
protocol messages can cause memory exhaustion, leak host memory to the
guest or cause OOB writes.  The writes seem difficult to control, but a
sufficiently crafty attacker could potentially use these to compromise
the host.

This was reported by SPICE maintainers Frediano Ziglio and Christophe
Fergeau, who also provided the attached patchset against the current
stable branch (0.12).

https://bugzilla.redhat.com/show_bug.cgi?id=1452606

-- 
Kristian Fiskerstrand
OpenPGP keyblock reachable at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3

View attachment "spice-CVE-2017-7506.patch" of type "text/x-patch" (5891 bytes)

Download attachment "signature.asc" of type "application/pgp-signature" (489 bytes)

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ