rpm package
opensuse/spice-vdagent&distro=openSUSE Leap 16.0
pkg:rpm/opensuse/spice-vdagent&distro=openSUSE%20Leap%2016.0
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-57966 | Med | 4.4 | < 0.22.1-160000.3.1 | 0.22.1-160000.3.1 | Jun 29, 2026 | A path traversal vulnerability was found in spice-vdagent. This flaw allows a malicious or compromised SPICE host to write arbitrary files to any location on the guest operating system. This occurs because the filename provided by the SPICE host during file transfers is not prope | |
| CVE-2026-57965 | Med | 5.1 | < 0.22.1-160000.3.1 | 0.22.1-160000.3.1 | Jun 29, 2026 | A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This vulnerability can lead to a heap buffer overflow, causing the spice-vdagent daemon to crash and resulting in a Denial of Service ( |
- affected < 0.22.1-160000.3.1fixed 0.22.1-160000.3.1
A path traversal vulnerability was found in spice-vdagent. This flaw allows a malicious or compromised SPICE host to write arbitrary files to any location on the guest operating system. This occurs because the filename provided by the SPICE host during file transfers is not prope
- affected < 0.22.1-160000.3.1fixed 0.22.1-160000.3.1
A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This vulnerability can lead to a heap buffer overflow, causing the spice-vdagent daemon to crash and resulting in a Denial of Service (