CVE-2019-3813

Publication date 28 January 2019

Last updated 25 August 2025

Ubuntu priority

Cvss 3 Severity Score

Description

Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt. This may lead to a denial of service, or, in the worst case, code-execution by unauthenticated attackers.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
spice	18.10 cosmic	Fixed 0.14.0-1ubuntu4.2
	18.04 LTS bionic	Fixed 0.14.0-1ubuntu2.4
	16.04 LTS xenial	Fixed 0.12.6-4ubuntu0.4
	14.04 LTS trusty	Fixed 0.12.4-0nocelt2ubuntu1.8
spice-gtk	18.10 cosmic	Not affected
	18.04 LTS bionic	Not affected
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not in release
spice-protocol	18.10 cosmic	Not affected
	18.04 LTS bionic	Not affected
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not in release

Notes

leosilva

Issues that touch python_modules for spice in Xenial need to be addressed in spice-protocol.

Severity score breakdown

Parameter	Value
Base score	7.5 · High
Attack vector	Adjacent
Attack complexity	High
Privileges required	None
User interaction	None
Scope	Unchanged
Confidentiality	High
Integrity impact	High
Availability impact	High
Vector	CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H