CVE-2013-4130

The (1) red_channel_pipes_add_type and (2) red_channel_pipes_add_empty_msg functions in server/red_channel.c in SPICE before 0.12.4 do not properly perform…

published August 20, 2013

CVSS
—
EPSS
3%
Percentile
85.4
In the wild
Unconfirmed
What it is

The (1) red_channel_pipes_add_type and (2) red_channel_pipes_add_empty_msg functions in server/red_channel.c in SPICE before 0.12.4 do not properly perform ring loops, which might allow remote attackers to cause a denial of service (reachable assertion and server exit) by triggering a network error.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02629 · 85.4th percentile
Published
2013-08-20T22:00Z
EPSS history
Timeline
  • 20 AUG 22:00Z
    The (1) red_channel_pipes_add_type and (2) red_channel_pipes_add_empty_msg functions in server/red_channel.c in SPICE before 0.12.4 do not properly perform…
    cvelistv5