Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:qspice:0.3.0:*:*:*:*:*:*:*

part: a version: 0.3.0 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductQspice (1ada2aba-9f38-5ff2-bc9c-1f0401dbe5ef)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-0429 vulnerable 2026-06-08 04:52:02.498646 Details available
libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly restrict the addresses upon which memory-management actions are performed, which allows guest OS users to cause a denial of service (guest OS crash) or possibly gain privileges via unspecified vectors.
Published: 2010-08-24T17:00:00.000Z
Updated: 2024-08-07T00:45:12.244Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0428 vulnerable 2026-06-08 04:52:02.498223 Details available
libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly validate guest QXL driver pointers, which allows guest OS users to cause a denial of service (invalid pointer dereference and guest OS crash) or possibly gain privileges via unspecified vectors.
Published: 2010-08-24T17:00:00.000Z
Updated: 2024-08-07T00:45:12.298Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.