CVE-2020-23793: An issue was discovered in spice-server spice-server-0.14.0-6.el7_6.1.x86_64 of Redhat's VDI product. There is a security vulnerablility that can restart…

PriorityP340high8.6CVSS 3.1

AVNACLPRNUINSCCNINAH

EPSS

0.72%

49.9th percentile

An issue was discovered in spice-server spice-server-0.14.0-6.el7_6.1.x86_64 of Redhat's VDI product. There is a security vulnerablility that can restart KVMvirtual machine without any authorization. It is not yet known if there will be other other effects.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	spice	< spice 0.13.90-0.1 (bookworm)	spice 0.13.90-0.1 (bookworm)
spice-space	spice-server	—	—
spice_project	spice	>= 0 < 0.13.90-0.1	0.13.90-0.1
spice_project	spice	>= 0 < 0.13.90-0.1	0.13.90-0.1
spice_project	spice	>= 0 < 0.13.90-0.1	0.13.90-0.1
spice_project	spice	>= 0 < 0.13.90-0.1	0.13.90-0.1

CVSS provenance

nvdv3.18.6HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

osv8.6HIGH

vendor_debian8.6HIGH

vendor_redhat8.6HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.