CVE-2017-12194

EPSS 5.5%CWE-121

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 5.5%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Ciclo de vida

14 mar 2018Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A flaw was found in the way spice-client processed certain messages sent from the server. An attacker, having control of malicious spice-server, could use this flaw to crash the client or execute arbitrary code with permissions of the user running the client. spice-gtk versions through 0.34 are believed to be vulnerable.

Produtos afetados

freedesktop.org · spice-gtk

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://bugzilla.redhat.com/show_bug.cgi?id=1501200 https://security.gentoo.org/glsa/201811-20 https://usn.ubuntu.com/3659-1/http://www.securityfocus.com/bid/103413