SB2018042104 - Privilege escalation in spice-gtk
Published: April 21, 2018
Security Bulletin ID
SB2018042104
Severity
Medium
Patch available
NO
Number of vulnerabilities
1
Exploitation vector
Adjecent network
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Integer overflow (CVE-ID: CVE-2017-12194)
The vulnerability allows an adjacent unauthenticated attacker to gain elevated privileges on the target system.The weakness exists in the spice-gtk component due to improper sanitization of pointers and lengths when handling spice-server messages. An adjacent attacker can trick the victim into connecting to an attacker-controlled spice-server and send messages that submit malicious input, trigger integer overflow and execute arbitrary code with root privileges.
Remediation
Cybersecurity Help is not aware of any official remediation provided by the vendor.