CVE-2017-15108 | BDVDB-2026-95575 Detail

Red Hatspice-vdagent

Description#

spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to inject arbitrary commands to be executed.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

References#

https://security.gentoo.org/glsa/201804-09
https://cgit.freedesktop.org/spice/linux/vd_agent/commit/?id=8ba174816d245757e743e636df357910e1d5eb61
https://lists.debian.org/debian-lts-announce/2021/01/msg00012.html

Exploit#

No public exploit known

History#

Version 12018-01-20Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.