CVE-2017-7506

8.8 highEPSS 4.2%

High (8.8) in spice project spice. EPSS 4.2% chance of exploitation in the next 30 days.

spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 4.2% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2017-07-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

spice_project:spice

References

http://www.debian.org/security/2017/dsa-3907
http://www.openwall.com/lists/oss-security/2017/07/14/1
http://www.securityfocus.com/bid/99583
https://access.redhat.com/errata/RHSA-2017:2471
https://access.redhat.com/errata/RHSA-2018:3522

Check your stack JSON