CVE-2013-4130

Published: Aug 20, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The (1) red_channel_pipes_add_type and (2) red_channel_pipes_add_empty_msg functions in server/red_channel.c in SPICE before 0.12.4 do not properly perform ring loops, which might allow remote attackers to cause a denial of service (reachable assertion and server exit) by triggering a network error.

Affected (25)

Products: Spice Project: Spice · Canonical: Ubuntu Linux

1 product

1 product

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Spice Project Spice	Up to 0.12.3
Spice Project Spice	Version 0.10.0
Spice Project Spice	Version 0.10.1
Spice Project Spice	Version 0.11.0
Spice Project Spice	Version 0.11.3
Spice Project Spice	Version 0.12.0
Spice Project Spice	Version 0.12.2
Spice Project Spice	Version 0.5.2
Spice Project Spice	Version 0.5.3
Spice Project Spice	Version 0.6.0
Spice Project Spice	Version 0.6.1
Spice Project Spice	Version 0.6.2
Spice Project Spice	Version 0.6.3
Spice Project Spice	Version 0.6.4
Spice Project Spice	Version 0.7.0
Spice Project Spice	Version 0.7.1
Spice Project Spice	Version 0.7.2
Spice Project Spice	Version 0.7.3
Spice Project Spice	Version 0.8.0
Spice Project Spice	Version 0.8.1
Spice Project Spice	Version 0.8.2
Spice Project Spice	Version 0.8.3
Spice Project Spice	Version 0.9.0
Spice Project Spice	Version 0.9.1