CVE-2020-25653CWE-362

A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections

published November 26, 2020

CVSS
—
EPSS
0%
Percentile
24.9
In the wild
Unconfirmed
What it is

A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw may allow an unprivileged local guest user to become the active agent for spice-vdagentd, possibly resulting in a denial of service or information leakage from the host. The highest threat from this vulnerability is to data confidentiality as well as system availability. This flaw affects spice-vdagent versions 0.20 and prior.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00330 · 24.9th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2020-11-26T01:23Z
EPSS history
Timeline
  • 26 NOV 01:23Z
    A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections
    cvelistv5