SPICE CVE-2013-4130 Multiple Denial of Service Vulnerabilities

Bugtraq ID:	61192
Class:	Unknown
CVE:	CVE-2013-4130
Remote:	Yes
Local:	No
Published:	Jul 15 2013 12:00AM
Updated:	May 07 2015 05:01PM
Credit:	David Gibson of the Red Hat
Vulnerable:	Red Hat Enterprise Virtualization Hypervisor for RHEL 6 0 Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 CentOS CentOS 6
Not Vulnerable:

SPICE CVE-2013-4130 Multiple Denial of Service Vulnerabilities

SPICE is prone to multiple denial-of-service vulnerabilities.

Successfully exploiting these issues will result in denial-of-service conditions.

SPICE CVE-2013-4130 Multiple Denial of Service Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SPICE CVE-2013-4130 Multiple Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.


Mandriva Business Server 1 X86 64

• Mandriva lib64spice-server-devel-0.12.2-5.1.mbs1.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva lib64spice-server1-0.12.2-5.1.mbs1.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva spice-client-0.12.2-5.1.mbs1.x86_64.rpm
  http://www.mandriva.com/en/downloads/

SPICE CVE-2013-4130 Multiple Denial of Service Vulnerabilities

References:

• SPICE Homepage (SPICE)
  
• Use RING_FOREACH_SAFE in red_channel.c functions which are missing it (David Gibson)