CVE-2020-25653 log
| Source |
|
| Severity | Medium |
| Remote | No |
| Type | Information disclosure |
| Description | A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw may allow an unprivileged local guest user to become the active agent for spice-vdagentd, possibly resulting in a denial of service or information leakage from the host. The highest threat from this vulnerability is to data confidentiality as well as system availability. This flaw affects spice-vdagent versions 0.20 and prior. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-1303 | spice-vdagent | 0.20.0+6+g8adf50d-1 | 0.21.0-1 | Medium | Fixed | FS#68531 |