portage-ng / portage / app-emulation / spice-vdagent / 0.22.1
version « ‹ 0.22.1 › »
graphs detail deptree gantt
cli --merge --fetchonly --info
security glsa 1 bugs
legacy emerge pmerge
portage-ng glsa
1 advisory reference app-emulation/spice-vdagent · none place version 0.22.1 in a vulnerable range
▸ GLSA 201804-09 SPICE VDAgent: Arbitrary command injection this version unaffected normal local 2018-04-08

A vulnerability in SPICE VDAgent could allow local attackers to execute arbitrary commands.

Announced
2018-04-08
Revised
2018-04-08
Access
local
Bugs
#650020
Advisory
https://security.gentoo.org/glsa/201804-09

Affected packages

PackageArchVulnerableUnaffected
app-emulation/spice-vdagent*< 0.17.0_p20180319>= 0.17.0_p20180319

Background

Provides a complete open source solution for remote access to virtual machines in a seamless way so you can play videos, record audio, share USB devices and share folders without complications.

Description

SPICE VDAgent does not properly escape save directory before passing to shell.

Impact

A local attacker could execute arbitrary commands.

Workaround

There is no known workaround at this time.

Resolution

All SPICE VDAgent users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=app-emulation/spice-vdagent-0.17.0_p20180319"

References