CVE-2019-3813

Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt

published February 4, 2019

CVSS
—
EPSS
1%
Percentile
68.1
In the wild
Unconfirmed
What it is

Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt. This may lead to a denial of service, or, in the worst case, code-execution by unauthenticated attackers.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01208 · 68.1th percentile
Published
2019-02-04T18:00Z
EPSS history
Timeline
  • 04 FEB 18:00Z
    Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt
    cvelistv5