CVE-2013-4130 - CVE House
Back to Database
Status published Medium CVE-2013-4130

The (1) red_channel_pipes_add_type and (2) red_channel_pipes_add_empty_msg functions in server/red_channel.c in...

Vulnerability Description

The (1) red_channel_pipes_add_type and (2) red_channel_pipes_add_empty_msg functions in server/red_channel.c in SPICE before 0.12.4 do not properly perform ring loops, which might allow remote attackers to cause a denial of service (reachable assertion and server exit) by triggering a network error.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-4130

Credits & Attribution

No credits recorded in the NVD database.

References

More from spice project

View All →
CVE-2015-3247
Race condition in the worker_update_monitors_config function in SPICE 0.12.4 allows...
Medium 6.9
CVE-2013-4282
Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in...
Medium 5

Affected Vendor

spice project

View all reports →

Affected Software

spice, ubuntu linux
Vulnerable Versions:
0, 0.5.2, 0.5.3, 0.6.0, 0.6.1, 0.6.2, 0.6.3, 0.6.4, 0.7.0, 0.7.1, 0.7.2, 0.7.3, 0.8.0, 0.8.1, 0.8.2, 0.8.3, 0.9.0, 0.9.1, 0.10.0, 0.10.1, 0.11.0, 0.11.3, 0.12.0, 0.12.2, 13.04

Timeline

Official Publish: August 20th, 2013
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.