CVE-2017-7506

Published: Jul 18, 2017Modified: May 13, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.

Affected (30)

Products: Spice Project: Spice

Spice Project

1 product

Spice

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Spice Project Spice	Version 0.10.0
Spice Project Spice	Version 0.10.1
Spice Project Spice	Version 0.11.0
Spice Project Spice	Version 0.11.3
Spice Project Spice	Version 0.12.0
Spice Project Spice	Version 0.12.2
Spice Project Spice	Version 0.12.3
Spice Project Spice	Version 0.12.4
Spice Project Spice	Version 0.12.5
Spice Project Spice	Version 0.12.6
Spice Project Spice	Version 0.12.7
Spice Project Spice	Version 0.12.8
Spice Project Spice	Version 0.13.0
Spice Project Spice	Version 0.5.2
Spice Project Spice	Version 0.5.3
Spice Project Spice	Version 0.6.0
Spice Project Spice	Version 0.6.1
Spice Project Spice	Version 0.6.2
Spice Project Spice	Version 0.6.3
Spice Project Spice	Version 0.6.4
Spice Project Spice	Version 0.7.0
Spice Project Spice	Version 0.7.1
Spice Project Spice	Version 0.7.2
Spice Project Spice	Version 0.7.3
Spice Project Spice	Version 0.8.0
Spice Project Spice	Version 0.8.1
Spice Project Spice	Version 0.8.2
Spice Project Spice	Version 0.8.3
Spice Project Spice	Version 0.9.0
Spice Project Spice	Version 0.9.1