Search CVE reports
1 – 5 of 5 results
CVE-2020-25653
Low prioritySome fixes available 10 of 11
A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw may allow an unprivileged local guest user to become the active agent for spice-vdagentd, possibly resulting...
1 affected packages
spice-vdagent
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
spice-vdagent | Fixed | Fixed | Fixed | Fixed | Vulnerable |
CVE-2020-25652
Low prioritySome fixes available 10 of 11
A flaw was found in the spice-vdagentd daemon, where it did not properly handle client connections that can be established via the UNIX domain socket in `/run/spice-vdagentd/spice-vdagent-sock`. Any unprivileged local guest user...
1 affected packages
spice-vdagent
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
spice-vdagent | Fixed | Fixed | Fixed | Fixed | Vulnerable |
CVE-2020-25651
Low prioritySome fixes available 10 of 11
A flaw was found in the SPICE file transfer protocol. File data from the host system can end up in full or in parts in the client connection of an illegitimate local user in the VM system. Active file transfers from other users...
1 affected packages
spice-vdagent
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
spice-vdagent | Fixed | Fixed | Fixed | Fixed | Vulnerable |
CVE-2020-25650
Low prioritySome fixes available 10 of 11
A flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system to the virtual machine. Any unprivileged local guest user with access to the UNIX domain socket...
1 affected packages
spice-vdagent
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
spice-vdagent | Fixed | Fixed | Fixed | Fixed | Vulnerable |
CVE-2017-15108
Medium prioritySome fixes available 13 of 16
spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to inject arbitrary commands to be executed.
1 affected packages
spice-vdagent
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
spice-vdagent | Fixed | Fixed | Fixed | Fixed | Vulnerable |