Search for packages
Package details: pkg:deb/debian/spice-gtk@0.33-3.3%2Bdeb9u1
purl pkg:deb/debian/spice-gtk@0.33-3.3%2Bdeb9u1
Next non-vulnerable version 0.39-1
Latest non-vulnerable version 0.39-1
Risk 4.5
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-afzs-1b88-aaaf
Aliases:
CVE-2018-10873
A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts.
0.35-2
Affected by 2 other vulnerabilities.
VCID-agz7-4mx4-aaah
Aliases:
CVE-2018-10893
Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A malicious server could cause the client to crash or, potentially, execute arbitrary code.
0.39-1
Affected by 0 other vulnerabilities.
VCID-q6fk-hm76-aaaf
Aliases:
CVE-2017-12194
A flaw was found in the way spice-client processed certain messages sent from the server. An attacker, having control of malicious spice-server, could use this flaw to crash the client or execute arbitrary code with permissions of the user running the client. spice-gtk versions through 0.34 are believed to be vulnerable.
0.35-2
Affected by 2 other vulnerabilities.
VCID-xngp-n9hs-aaag
Aliases:
CVE-2020-14355
Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affected by these flaws. These flaws allow a malicious client or server to send specially crafted messages that, when processed by the QUIC image compression algorithm, result in a process crash or potential code execution.
0.39-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T19:08:29.928737+00:00 Debian Oval Importer Affected by VCID-afzs-1b88-aaaf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.3
2025-06-21T18:15:12.470566+00:00 Debian Oval Importer Affected by VCID-xngp-n9hs-aaag https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.3
2025-06-21T16:25:43.930676+00:00 Debian Oval Importer Affected by VCID-q6fk-hm76-aaaf https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T12:51:29.296784+00:00 Debian Oval Importer Affected by VCID-afzs-1b88-aaaf https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T05:49:54.017124+00:00 Debian Oval Importer Affected by VCID-xngp-n9hs-aaag None 36.1.3
2025-06-21T01:49:28.804102+00:00 Debian Oval Importer Affected by VCID-agz7-4mx4-aaah None 36.1.3
2025-06-20T22:53:07.874669+00:00 Debian Oval Importer Affected by VCID-q6fk-hm76-aaaf None 36.1.3
2025-06-20T20:23:51.465208+00:00 Debian Oval Importer Affected by VCID-afzs-1b88-aaaf None 36.1.3
2025-06-08T11:37:31.729193+00:00 Debian Oval Importer Affected by VCID-afzs-1b88-aaaf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T10:46:23.389174+00:00 Debian Oval Importer Affected by VCID-xngp-n9hs-aaag https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T09:11:40.667475+00:00 Debian Oval Importer Affected by VCID-q6fk-hm76-aaaf https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T05:46:31.641650+00:00 Debian Oval Importer Affected by VCID-afzs-1b88-aaaf https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-07T23:28:28.068003+00:00 Debian Oval Importer Affected by VCID-xngp-n9hs-aaag None 36.1.0
2025-06-07T19:12:49.164884+00:00 Debian Oval Importer Affected by VCID-agz7-4mx4-aaah None 36.1.0
2025-06-07T16:16:27.709725+00:00 Debian Oval Importer Affected by VCID-q6fk-hm76-aaaf None 36.1.0
2025-06-07T13:59:15.822512+00:00 Debian Oval Importer Affected by VCID-afzs-1b88-aaaf None 36.1.0
2025-04-12T21:54:58.578551+00:00 Debian Oval Importer Affected by VCID-q6fk-hm76-aaaf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T20:11:28.722944+00:00 Debian Oval Importer Affected by VCID-agz7-4mx4-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T17:22:07.044181+00:00 Debian Oval Importer Affected by VCID-afzs-1b88-aaaf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T16:28:26.302304+00:00 Debian Oval Importer Affected by VCID-xngp-n9hs-aaag https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-08T07:43:33.996309+00:00 Debian Oval Importer Affected by VCID-q6fk-hm76-aaaf https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T04:18:17.557650+00:00 Debian Oval Importer Affected by VCID-afzs-1b88-aaaf https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-07T22:00:21.796517+00:00 Debian Oval Importer Affected by VCID-xngp-n9hs-aaag None 36.0.0
2025-04-07T17:50:37.726759+00:00 Debian Oval Importer Affected by VCID-agz7-4mx4-aaah None 36.0.0
2025-04-07T14:47:58.831832+00:00 Debian Oval Importer Affected by VCID-q6fk-hm76-aaaf None 36.0.0
2025-04-07T12:33:44.862892+00:00 Debian Oval Importer Affected by VCID-afzs-1b88-aaaf None 36.0.0
2025-04-07T06:59:06.130440+00:00 Debian Importer Affected by VCID-q6fk-hm76-aaaf None 36.0.0
2025-04-06T18:58:31.467840+00:00 Debian Importer Affected by VCID-agz7-4mx4-aaah None 36.0.0
2025-02-19T00:36:36.114534+00:00 Debian Importer Affected by VCID-agz7-4mx4-aaah None 35.1.0
2025-02-18T20:04:10.374609+00:00 Debian Importer Affected by VCID-q6fk-hm76-aaaf None 35.1.0
2024-04-24T12:09:46.039838+00:00 Debian Importer Affected by VCID-agz7-4mx4-aaah None 34.0.0rc4
2024-04-24T10:49:27.387201+00:00 Debian Importer Affected by VCID-q6fk-hm76-aaaf None 34.0.0rc4
2024-01-10T13:58:53.939531+00:00 Debian Importer Affected by VCID-agz7-4mx4-aaah None 34.0.0rc2
2024-01-10T12:37:19.457923+00:00 Debian Importer Affected by VCID-q6fk-hm76-aaaf None 34.0.0rc2
2024-01-04T05:08:22.087349+00:00 Debian Importer Affected by VCID-agz7-4mx4-aaah None 34.0.0rc1
2024-01-04T04:18:39.358394+00:00 Debian Importer Affected by VCID-q6fk-hm76-aaaf None 34.0.0rc1