漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
A flaw was found in the SPICE file transfer protocol. File data from the host system can end up in full or in parts in the client connection of an illegitimate local user in the VM system. Active file transfers from other users could also be interrupted, resulting in a denial of service. The highest threat from this vulnerability is to data confidentiality as well as system availability. This flaw affects spice-vdagent versions 0.20 and prior.
CVSS Information
N/A
Vulnerability Type
使用共享资源的并发执行不恰当同步问题(竞争条件)
Vulnerability Title
SPICE vdagent 竞争条件问题漏洞
Vulnerability Description
SPICE vdagent是个人开发者的一个远程连接软件的 Linux 客户端。 SPICE vdagent 中存在竞争条件问题漏洞。该漏洞源于SPICE vdagent错误地处理了active_xfers哈希表。本地攻击者可能会利用此漏洞导致SPICE vdagent占用内存,从而导致拒绝服务或获取敏感文件内容。
CVSS Information
N/A
Vulnerability Type
N/A