Bug 496120 (CVE-2013-4282)

Summary:	<app-emulation/spice-0.12.1: Denial of Service via long password (CVE-2013-4282)
Product:	Gentoo Security	Reporter:	GLSAMaker/CVETool Bot <glsamaker>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	minor
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	B3 [noglsa]
Package list:		Runtime testing required:	---

Description GLSAMaker/CVETool Bot gentoo-dev

2013-12-27 03:37:10 UTC

CVE-2013-4282 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4282):
  Stack-based buffer overflow in the reds_handle_ticket function in
  server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of
  service (crash) via a long password in a SPICE ticket.


Filing to close, nothing to see here (no GLSA because we already said noglsa to a newer SPICE version)