CVE-2018-10893

Name of the Vulnerable Software and Affected Versions spice-client (affected versions not specified)

Description The issue is related to integer overflow in the spice-client software for remote access. It may allow a remote attacker to gain access to confidential information or cause a denial of service. Additionally, multiple integer overflow and buffer overflow issues were found in the handling of LZ compressed frames, which could cause the client to crash or potentially execute arbitrary code if a malicious server is involved.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.