NetSight
IP …
medium5.0

CVE-2013-4282

Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service (crash) vi…

Impact

Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service (crash) via a long password in a SPICE ticket.

Affected products

VendorProductAffected versions
Spice ProjectSpice
Version 0.12.0
RedhatEnterprise Virtualization
Version 3.0
RedhatEnterprise Linux
Versions 5, 6.0

Weakness classification

CWE-119

References