Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Red Hat SPICE 基于堆的缓冲区溢出漏洞
Vulnerability Description
Red Hat SPICE是美国红帽(Red Hat)公司的一个企业虚拟化桌面版所使用的自适应远程呈现开源协议,它主要用于将用户与其虚拟桌面进行连接,能够提供与物理桌面完全相同的最终用户体验。 Red Hat SPICE 0.12.6之前版本中存在基于堆的缓冲区溢出漏洞。虚拟机端攻击者可借助虚拟机QXL命令利用该漏洞读取或写入任意内存位置。
CVSS Information
N/A
Vulnerability Type
N/A