CVE-2013-4282 - CVE House
Back to Database
Status published Medium CVE-2013-4282

Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in...

Vulnerability Description

Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service (crash) via a long password in a SPICE ticket.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-4282

Credits & Attribution

No credits recorded in the NVD database.

References

More from spice project

View All →
CVE-2015-3247
Race condition in the worker_update_monitors_config function in SPICE 0.12.4 allows...
Medium 6.9
CVE-2013-4130
The (1) red_channel_pipes_add_type and (2) red_channel_pipes_add_empty_msg functions in server/red_channel.c in...
Medium 5

Affected Vendor

spice project

View all reports →

Affected Software

spice, enterprise virtualization, enterprise linux
Vulnerable Versions:
0.12.0, 3.0, 5, 6.0

Timeline

Official Publish: November 2nd, 2013
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.