https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 12:23:57 +0000 https://cve.radiocsirt.org/vuln/alsa-2021:1791 <p><strong>Affected:</strong> AlmaLinux:8: spice-vdagent</p> <p>The spice-vdagent packages provide a SPICE agent for Linux guests.</p> <p>Security Fix(es):</p> <p>* spice-vdagent: possible file transfer DoS and information leak via active_xfers hash map (CVE-2020-25651)</p> <p>* spice-vdagent: UNIX domain socket peer PID retrieved via SO_PEERCRED is subject to race condition (CVE-2020-25653)</p> <p>* spice-vdagent: memory DoS via arbitrary entries in active_xfers hash table (CVE-2020-25650)</p> <p>* spice-vdagent: possibility to exhaust file descriptors in vdagentd (CVE-2020-25652)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: spice-vdagent</p> <p>The spice-vdagent packages provide a SPICE agent for Linux guests.</p> <p>Security Fix(es):</p> <p>* spice-vdagent: possible file transfer DoS and information leak via active_xfers hash map (CVE-2020-25651)</p> <p>* spice-vdagent: UNIX domain socket peer PID retrieved via SO_PEERCRED is subject to race condition (CVE-2020-25653)</p> <p>* spice-vdagent: memory DoS via arbitrary entries in active_xfers hash table (CVE-2020-25650)</p> <p>* spice-vdagent: possibility to exhaust file descriptors in vdagentd (CVE-2020-25652)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2021:1791 https://cve.radiocsirt.org/vuln/euvd-2026-45694 EUVD-2026-45694 https://cve.radiocsirt.org/vuln/euvd-2026-45694 https://cve.radiocsirt.org/vuln/fkie_cve-2020-25653 <p>A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw may allow an unprivileged local guest user to become the active agent for spice-vdagentd, possibly resulting in a denial of service or information leakage from the host. The highest threat from this vulnerability is to data confidentiality as well as system availability. This flaw affects spice-vdagent versions 0.20 and prior.</p> <p>A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw may allow an unprivileged local guest user to become the active agent for spice-vdagentd, possibly resulting in a denial of service or information leakage from the host. The highest threat from this vulnerability is to data confidentiality as well as system availability. This flaw affects spice-vdagent versions 0.20 and prior.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-25653 https://cve.radiocsirt.org/vuln/ghsa-5v7v-8wfp-pqqp <p>A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw may allow an unprivileged local guest user to become the active agent for spice-vdagentd, possibly resulting in a denial of service or information leakage from the host. The highest threat from this vulnerability is to data confidentiality as well as system availability. This flaw affects spice-vdagent versions 0.20 and prior.</p> <p>A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw may allow an unprivileged local guest user to become the active agent for spice-vdagentd, possibly resulting in a denial of service or information leakage from the host. The highest threat from this vulnerability is to data confidentiality as well as system availability. This flaw affects spice-vdagent versions 0.20 and prior.</p> https://cve.radiocsirt.org/vuln/ghsa-5v7v-8wfp-pqqp https://cve.radiocsirt.org/vuln/gsd-2020-25653 gsd-2020-25653 https://cve.radiocsirt.org/vuln/gsd-2020-25653 https://cve.radiocsirt.org/vuln/msrc_cve-2020-25653 msrc_CVE-2020-25653 https://cve.radiocsirt.org/vuln/msrc_cve-2020-25653 https://cve.radiocsirt.org/vuln/oesa-2021-1081 <p><strong>Affected:</strong> openEuler:20.03-LTS: spice-vdagent, openEuler:20.03-LTS-SP1: spice-vdagent</p> <p>spice-vdagent is an optional component for enhancing user experience and performing guest-oriented management tasks. Its features includes: client mouse mode (no need to grab mouse by client, no mouse lag), automatic adjustment of screen resolution, copy and paste (text and image) between client and domU. It also requires vdagent service installed on domU o.s. to work. The default is 0. Security Fix(es): A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw may allow an unprivileged local guest user to become the active agent for spice-vdagentd, possibly resulting in a denial of service or information leakage from the host. The highest threat from this vulnerability is to data confidentiality as well as system availability. This flaw affects spice-vdagent versions 0.20 and prior.(CVE-2020-25653) A flaw was found in the spice-vdagentd daemon, where it did not properly handle client connections that can be established via the UNIX domain socket in `/run/spice-vdagentd/spice-vdagent-sock`. Any unprivileged local guest user could use this flaw to prevent legitimate agents from connecting to the spice-vdagentd daemon, resulting in a denial of service. The highest threat from this vulnerability is to system availability. This flaw affects spice-vdagent versions 0.20 and prior.(CVE-2020-25652) A flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system to the virtual…</p> <p><strong>Affected:</strong> openEuler:20.03-LTS: spice-vdagent, openEuler:20.03-LTS-SP1: spice-vdagent</p> <p>spice-vdagent is an optional component for enhancing user experience and performing guest-oriented management tasks. Its features includes: client mouse mode (no need to grab mouse by client, no mouse lag), automatic adjustment of screen resolution, copy and paste (text and image) between client and domU. It also requires vdagent service installed on domU o.s. to work. The default is 0. Security Fix(es): A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw may allow an unprivileged local guest user to become the active agent for spice-vdagentd, possibly resulting in a denial of service or information leakage from the host. The highest threat from this vulnerability is to data confidentiality as well as system availability. This flaw affects spice-vdagent versions 0.20 and prior.(CVE-2020-25653) A flaw was found in the spice-vdagentd daemon, where it did not properly handle client connections that can be established via the UNIX domain socket in `/run/spice-vdagentd/spice-vdagent-sock`. Any unprivileged local guest user could use this flaw to prevent legitimate agents from connecting to the spice-vdagentd daemon, resulting in a denial of service. The highest threat from this vulnerability is to system availability. This flaw affects spice-vdagent versions 0.20 and prior.(CVE-2020-25652) A flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system to the virtual…</p> https://cve.radiocsirt.org/vuln/oesa-2021-1081 https://cve.radiocsirt.org/vuln/opensuse-su-2021:2614-1 <p>Security update for spice-vdagent</p> <p>Security update for spice-vdagent</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:2614-1 https://cve.radiocsirt.org/vuln/suse-su-2020:3268-1 <p>Security update for spice-vdagent</p> <p>Security update for spice-vdagent</p> https://cve.radiocsirt.org/vuln/suse-su-2020:3268-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25653 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: spice-vdagent, Ubuntu:18.04:LTS: spice-vdagent, Ubuntu:20.04:LTS: spice-vdagent</p> <p>A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw may allow an unprivileged local guest user to become the active agent for spice-vdagentd, possibly resulting in a denial of service or information leakage from the host. The highest threat from this vulnerability is to data confidentiality as well as system availability. This flaw affects spice-vdagent versions 0.20 and prior.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: spice-vdagent, Ubuntu:18.04:LTS: spice-vdagent, Ubuntu:20.04:LTS: spice-vdagent</p> <p>A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw may allow an unprivileged local guest user to become the active agent for spice-vdagentd, possibly resulting in a denial of service or information leakage from the host. The highest threat from this vulnerability is to data confidentiality as well as system availability. This flaw affects spice-vdagent versions 0.20 and prior.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25653