CVE-2020-25650CWE-770

A flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system to the virtual machine

published November 25, 2020

CVSS
—
EPSS
1%
Percentile
41.9
In the wild
Unconfirmed
What it is

A flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system to the virtual machine. Any unprivileged local guest user with access to the UNIX domain socket path `/run/spice-vdagentd/spice-vdagent-sock` could use this flaw to perform a memory denial of service for spice-vdagentd or even other processes in the VM system. The highest threat from this vulnerability is to system availability. This flaw affects spice-vdagent versions 0.20 and previous versions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00500 · 41.9th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2020-11-25T14:35Z
EPSS history
Timeline
  • 25 NOV 14:35Z
    A flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system to the virtual machine
    cvelistv5