Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-7506
6.5
MEDIUMCVSS v2
Published
July 18, 2017
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.
spice
NPMNo-frills string interpolation library.
NPMNo-frills string interpolation library.= 0.12.3, = 0.13.0, = 0.12.5, = 0.10.0, = 0.12.2, = 0.12.8, = 0.7.3, = 0.8.0, = 0.7.0, = 0.12.6, = 0.6.3, = 0.8.1, = 0.8.2, = 0.11.3, = 0.12.0, = 0.6.0, = 0.6.1, = 0.10.1, = 0.11.0, = 0.12.7, = 0.6.4, = 0.8.3, = 0.9.0, = 0.5.2, = 0.5.3, = 0.7.1, = 0.9.1, = 0.6.2, = 0.12.4, = 0.7.2NVD
sorellabs/spice
GitHubNo-frills string interpolation library.
GitHubNo-frills string interpolation library.= 0.12.3, = 0.13.0, = 0.12.5, = 0.10.0, = 0.12.2, = 0.12.8, = 0.7.3, = 0.8.0, = 0.7.0, = 0.12.6, = 0.6.3, = 0.8.1, = 0.8.2, = 0.11.3, = 0.12.0, = 0.6.0, = 0.6.1, = 0.10.1, = 0.11.0, = 0.12.7, = 0.6.4, = 0.8.3, = 0.9.0, = 0.5.2, = 0.5.3, = 0.7.1, = 0.9.1, = 0.6.2, = 0.12.4, = 0.7.2NVD