CVE-2019-3813 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2019-3813 Interim 1 45 2023-05-23T00:30:47Z current 2021-05-30T14:22:39Z 2023-05-23T00:30:47Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2019-3813 Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt. This may lead to a denial of service, or, in the worst case, code-execution by unauthenticated attackers. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2019-February/005081.html E-Mail link for SUSE-SU-2019:0229-1 https://lists.suse.com/pipermail/sle-security-updates/2019-February/005078.html E-Mail link for SUSE-SU-2019:0230-1 https://lists.suse.com/pipermail/sle-security-updates/2019-February/005079.html E-Mail link for SUSE-SU-2019:0231-1 https://lists.suse.com/pipermail/sle-security-updates/2019-April/005405.html E-Mail link for SUSE-SU-2019:0231-2 https://lists.suse.com/pipermail/sle-security-updates/2019-February/005084.html E-Mail link for SUSE-SU-2019:0241-1 https://lists.suse.com/pipermail/sle-security-updates/2019-February/005083.html E-Mail link for SUSE-SU-2019:0242-1 https://lists.suse.com/pipermail/sle-security-updates/2019-February/005094.html E-Mail link for SUSE-SU-2019:13943-1 https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00017.html E-Mail link for openSUSE-SU-2019:0167-1 https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00025.html E-Mail link for openSUSE-SU-2019:0176-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE CaaS Platform 4.0 SUSE Enterprise Storage 4 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Manager Retail Branch Server 4.0 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Manager Server 4.0 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 openSUSE Leap 15.0 openSUSE Leap 15.2 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Tumbleweed libspice-client-glib-2_0-8 libspice-client-glib-helper libspice-client-gtk-2_0-4 libspice-client-gtk-3_0-4 libspice-client-gtk-3_0-5 libspice-controller0 libspice-server-devel libspice-server-devel-0.12.4-18.1 libspice-server-devel-0.12.8-12.1 libspice-server-devel-0.14.0-4.6.2 libspice-server-devel-0.14.0-lp150.3.6.1 libspice-server-devel-0.14.1-2.21 libspice-server-devel-0.14.2-1.58 libspice-server-devel-0.14.3-1.48 libspice-server-devel-0.15.0-1.3 libspice-server-devel-0.15.0-150400.2.8 libspice-server1 libspice-server1-0.12.4-18.1 libspice-server1-0.12.4-8.21.1 libspice-server1-0.12.5-10.2.3.1 libspice-server1-0.12.7-10.6.1 libspice-server1-0.12.8-12.1 libspice-server1-0.14.0-4.6.2 libspice-server1-0.14.0-lp150.3.6.1 libspice-server1-0.14.1-2.21 libspice-server1-0.14.2-1.58 libspice-server1-0.14.2-3.3.1 libspice-server1-0.14.2-lp152.1.4 libspice-server1-0.14.3-1.48 libspice-server1-0.15.0-1.3 libspice-server1-0.15.0-150400.2.8 spice spice-gtk spice-gtk-devel typelib-1_0-SpiceClientGlib-2_0 typelib-1_0-SpiceClientGtk-3_0 libspice-server1-0.12.7-10.6.1 as a component of SUSE Enterprise Storage 4 libspice-server1-0.12.8-12.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libspice-server1-0.12.8-12.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libspice-server1-0.12.8-12.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libspice-server1-0.14.2-3.3.1 as a component of SUSE Linux Enterprise Micro 5.0 libspice-server1-0.14.3-1.48 as a component of SUSE Linux Enterprise Micro 5.2 libspice-server1-0.15.0-150400.2.8 as a component of SUSE Linux Enterprise Micro 5.3 libspice-server1-0.15.0-150400.2.8 as a component of SUSE Linux Enterprise Micro 5.4 libspice-server-devel-0.14.0-4.6.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 libspice-server1-0.14.0-4.6.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 libspice-server-devel-0.14.1-2.21 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 libspice-server1-0.14.1-2.21 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 libspice-server-devel-0.14.2-1.58 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libspice-server1-0.14.2-1.58 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libspice-server-devel-0.14.3-1.48 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 libspice-server1-0.14.3-1.48 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 libspice-server-devel-0.15.0-150400.2.8 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libspice-server1-0.15.0-150400.2.8 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libspice-server1-0.12.7-10.6.1 as a component of SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT libspice-server1-0.12.4-18.1 as a component of SUSE Linux Enterprise Server 11 SP4 libspice-server1-0.12.5-10.2.3.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libspice-server1-0.12.7-10.6.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libspice-server1-0.12.7-10.6.1 as a component of SUSE Linux Enterprise Server 12 SP2-ESPOS libspice-server1-0.12.7-10.6.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libspice-server1-0.12.8-12.1 as a component of SUSE Linux Enterprise Server 12 SP3 libspice-server1-0.12.8-12.1 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA libspice-server1-0.12.8-12.1 as a component of SUSE Linux Enterprise Server 12 SP4 libspice-server1-0.12.8-12.1 as a component of SUSE Linux Enterprise Server 12 SP5 libspice-server1-0.12.4-8.21.1 as a component of SUSE Linux Enterprise Server 12-LTSS libspice-server1-0.12.4-18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libspice-server1-0.12.5-10.2.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libspice-server1-0.12.7-10.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libspice-server1-0.12.8-12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libspice-server1-0.12.8-12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libspice-server-devel-0.12.4-18.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libspice-server-devel-0.12.8-12.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libspice-server-devel-0.12.8-12.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libspice-server-devel-0.12.8-12.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libspice-server1-0.12.7-10.6.1 as a component of SUSE OpenStack Cloud 7 libspice-server-devel-0.14.0-lp150.3.6.1 as a component of openSUSE Leap 15.0 libspice-server1-0.14.0-lp150.3.6.1 as a component of openSUSE Leap 15.0 libspice-server1-0.14.2-lp152.1.4 as a component of openSUSE Leap 15.2 libspice-server1-0.14.3-1.48 as a component of openSUSE Leap 15.3 libspice-server1-0.15.0-150400.2.8 as a component of openSUSE Leap 15.4 libspice-server-devel-0.15.0-1.3 as a component of openSUSE Tumbleweed libspice-server1-0.15.0-1.3 as a component of openSUSE Tumbleweed libspice-server1 as a component of HPE Helion OpenStack 8 spice as a component of HPE Helion OpenStack 8 libspice-server-devel as a component of SUSE CaaS Platform 4.0 libspice-server1 as a component of SUSE CaaS Platform 4.0 spice as a component of SUSE CaaS Platform 4.0 spice as a component of SUSE Enterprise Storage 6 libspice-client-glib-2_0-8 as a component of SUSE Linux Enterprise Desktop 12 SP3 libspice-client-glib-helper as a component of SUSE Linux Enterprise Desktop 12 SP3 libspice-client-gtk-3_0-5 as a component of SUSE Linux Enterprise Desktop 12 SP3 libspice-controller0 as a component of SUSE Linux Enterprise Desktop 12 SP3 typelib-1_0-SpiceClientGlib-2_0 as a component of SUSE Linux Enterprise Desktop 12 SP3 typelib-1_0-SpiceClientGtk-3_0 as a component of SUSE Linux Enterprise Desktop 12 SP3 spice-gtk as a component of SUSE Linux Enterprise Desktop 12 SP3 libspice-client-glib-2_0-8 as a component of SUSE Linux Enterprise Desktop 12 SP4 libspice-client-glib-helper as a component of SUSE Linux Enterprise Desktop 12 SP4 libspice-client-gtk-3_0-5 as a component of SUSE Linux Enterprise Desktop 12 SP4 libspice-controller0 as a component of SUSE Linux Enterprise Desktop 12 SP4 typelib-1_0-SpiceClientGlib-2_0 as a component of SUSE Linux Enterprise Desktop 12 SP4 typelib-1_0-SpiceClientGtk-3_0 as a component of SUSE Linux Enterprise Desktop 12 SP4 spice-gtk as a component of SUSE Linux Enterprise Desktop 12 SP4 spice-gtk as a component of SUSE Linux Enterprise High Performance Computing 12 SP4 spice as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libspice-server-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libspice-server1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS spice as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libspice-client-glib-2_0-8 as a component of SUSE Linux Enterprise Module for Basesystem 15 libspice-client-glib-helper as a component of SUSE Linux Enterprise Module for Basesystem 15 libspice-client-gtk-3_0-5 as a component of SUSE Linux Enterprise Module for Basesystem 15 libspice-controller0 as a component of SUSE Linux Enterprise Module for Basesystem 15 spice-gtk as a component of SUSE Linux Enterprise Module for Basesystem 15 spice-gtk-devel as a component of SUSE Linux Enterprise Module for Server Applications 15 typelib-1_0-SpiceClientGlib-2_0 as a component of SUSE Linux Enterprise Module for Server Applications 15 typelib-1_0-SpiceClientGtk-3_0 as a component of SUSE Linux Enterprise Module for Server Applications 15 spice-gtk as a component of SUSE Linux Enterprise Module for Server Applications 15 libspice-client-glib-2_0-8 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libspice-client-gtk-2_0-4 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libspice-client-gtk-3_0-4 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libspice-controller0 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS typelib-1_0-SpiceClientGlib-2_0 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS typelib-1_0-SpiceClientGtk-3_0 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS spice-gtk as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libspice-server1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL spice as a component of SUSE Linux Enterprise Server 12 SP2-BCL libspice-client-glib-2_0-8 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libspice-client-glib-helper as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libspice-client-gtk-2_0-4 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libspice-client-gtk-3_0-4 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libspice-controller0 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS typelib-1_0-SpiceClientGlib-2_0 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS typelib-1_0-SpiceClientGtk-3_0 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS spice-gtk as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libspice-client-glib-2_0-8 as a component of SUSE Linux Enterprise Server 12 SP3 libspice-client-glib-helper as a component of SUSE Linux Enterprise Server 12 SP3 libspice-client-gtk-3_0-5 as a component of SUSE Linux Enterprise Server 12 SP3 libspice-controller0 as a component of SUSE Linux Enterprise Server 12 SP3 typelib-1_0-SpiceClientGlib-2_0 as a component of SUSE Linux Enterprise Server 12 SP3 typelib-1_0-SpiceClientGtk-3_0 as a component of SUSE Linux Enterprise Server 12 SP3 spice-gtk as a component of SUSE Linux Enterprise Server 12 SP3 libspice-client-glib-2_0-8 as a component of SUSE Linux Enterprise Server 12 SP4 libspice-client-glib-helper as a component of SUSE Linux Enterprise Server 12 SP4 libspice-client-gtk-3_0-5 as a component of SUSE Linux Enterprise Server 12 SP4 libspice-controller0 as a component of SUSE Linux Enterprise Server 12 SP4 typelib-1_0-SpiceClientGlib-2_0 as a component of SUSE Linux Enterprise Server 12 SP4 typelib-1_0-SpiceClientGtk-3_0 as a component of SUSE Linux Enterprise Server 12 SP4 spice-gtk as a component of SUSE Linux Enterprise Server 12 SP4 libspice-server1 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS spice as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libspice-server1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS spice as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libspice-server1 as a component of SUSE Linux Enterprise Server 12 SP5 spice as a component of SUSE Linux Enterprise Server 12 SP5 libspice-client-glib-2_0-8 as a component of SUSE Linux Enterprise Server 12-LTSS libspice-client-gtk-2_0-4 as a component of SUSE Linux Enterprise Server 12-LTSS libspice-client-gtk-3_0-4 as a component of SUSE Linux Enterprise Server 12-LTSS libspice-controller0 as a component of SUSE Linux Enterprise Server 12-LTSS typelib-1_0-SpiceClientGlib-2_0 as a component of SUSE Linux Enterprise Server 12-LTSS typelib-1_0-SpiceClientGtk-3_0 as a component of SUSE Linux Enterprise Server 12-LTSS spice-gtk as a component of SUSE Linux Enterprise Server 12-LTSS libspice-server-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libspice-server1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS spice as a component of SUSE Linux Enterprise Server 15 SP1-LTSS spice as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 spice as a component of SUSE Linux Enterprise Server Teradata 12 SP3 spice-gtk as a component of SUSE Linux Enterprise Server for SAP Applications 12 libspice-client-glib-2_0-8 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libspice-client-glib-helper as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libspice-client-gtk-2_0-4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libspice-client-gtk-3_0-4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libspice-controller0 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 typelib-1_0-SpiceClientGlib-2_0 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 typelib-1_0-SpiceClientGtk-3_0 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 spice-gtk as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libspice-client-glib-2_0-8 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libspice-client-glib-helper as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libspice-client-gtk-3_0-5 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libspice-controller0 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 typelib-1_0-SpiceClientGlib-2_0 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 typelib-1_0-SpiceClientGtk-3_0 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 spice-gtk as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 spice as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libspice-server-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libspice-server1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 spice as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 spice-gtk-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 typelib-1_0-SpiceClientGtk-3_0 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 spice-gtk as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 spice-gtk-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 typelib-1_0-SpiceClientGtk-3_0 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 spice-gtk as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 spice as a component of SUSE Manager Proxy 4.0 spice as a component of SUSE Manager Retail Branch Server 4.0 spice as a component of SUSE Manager Server 4.0 libspice-server1 as a component of SUSE OpenStack Cloud 8 spice as a component of SUSE OpenStack Cloud 8 libspice-server1 as a component of SUSE OpenStack Cloud 9 spice as a component of SUSE OpenStack Cloud 9 libspice-server1 as a component of SUSE OpenStack Cloud Crowbar 8 spice as a component of SUSE OpenStack Cloud Crowbar 8 libspice-server1 as a component of SUSE OpenStack Cloud Crowbar 9 spice as a component of SUSE OpenStack Cloud Crowbar 9 Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt. This may lead to a denial of service, or, in the worst case, code-execution by unauthenticated attackers. CVE-2019-3813 SUSE Enterprise Storage 4:libspice-server1-0.12.7-10.6.1 SUSE Linux Enterprise Desktop 12 SP3:libspice-server1-0.12.8-12.1 SUSE Linux Enterprise Desktop 12 SP4:libspice-server1-0.12.8-12.1 SUSE Linux Enterprise High Performance Computing 12 SP5:libspice-server1-0.12.8-12.1 SUSE Linux Enterprise Micro 5.0:libspice-server1-0.14.2-3.3.1 SUSE Linux Enterprise Micro 5.2:libspice-server1-0.14.3-1.48 SUSE Linux Enterprise Micro 5.3:libspice-server1-0.15.0-150400.2.8 SUSE Linux Enterprise Micro 5.4:libspice-server1-0.15.0-150400.2.8 SUSE Linux Enterprise Module for Server Applications 15:libspice-server-devel-0.14.0-4.6.2 SUSE Linux Enterprise Module for Server Applications 15:libspice-server1-0.14.0-4.6.2 SUSE Linux Enterprise Module for Server Applications 15 SP1:libspice-server-devel-0.14.1-2.21 SUSE Linux Enterprise Module for Server Applications 15 SP1:libspice-server1-0.14.1-2.21 SUSE Linux Enterprise Module for Server Applications 15 SP2:libspice-server-devel-0.14.2-1.58 SUSE Linux Enterprise Module for Server Applications 15 SP2:libspice-server1-0.14.2-1.58 SUSE Linux Enterprise Module for Server Applications 15 SP3:libspice-server-devel-0.14.3-1.48 SUSE Linux Enterprise Module for Server Applications 15 SP3:libspice-server1-0.14.3-1.48 SUSE Linux Enterprise Module for Server Applications 15 SP4:libspice-server-devel-0.15.0-150400.2.8 SUSE Linux Enterprise Module for Server Applications 15 SP4:libspice-server1-0.15.0-150400.2.8 SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT:libspice-server1-0.12.7-10.6.1 SUSE Linux Enterprise Server 11 SP4:libspice-server1-0.12.4-18.1 SUSE Linux Enterprise Server 12 SP1-LTSS:libspice-server1-0.12.5-10.2.3.1 SUSE Linux Enterprise Server 12 SP2-BCL:libspice-server1-0.12.7-10.6.1 SUSE Linux Enterprise Server 12 SP2-ESPOS:libspice-server1-0.12.7-10.6.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libspice-server1-0.12.7-10.6.1 SUSE Linux Enterprise Server 12 SP3:libspice-server1-0.12.8-12.1 SUSE Linux Enterprise Server 12 SP3-TERADATA:libspice-server1-0.12.8-12.1 SUSE Linux Enterprise Server 12 SP4:libspice-server1-0.12.8-12.1 SUSE Linux Enterprise Server 12 SP5:libspice-server1-0.12.8-12.1 SUSE Linux Enterprise Server 12-LTSS:libspice-server1-0.12.4-8.21.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libspice-server1-0.12.4-18.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libspice-server1-0.12.5-10.2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libspice-server1-0.12.7-10.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libspice-server1-0.12.8-12.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libspice-server1-0.12.8-12.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libspice-server-devel-0.12.4-18.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libspice-server-devel-0.12.8-12.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libspice-server-devel-0.12.8-12.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libspice-server-devel-0.12.8-12.1 SUSE OpenStack Cloud 7:libspice-server1-0.12.7-10.6.1 openSUSE Leap 15.0:libspice-server-devel-0.14.0-lp150.3.6.1 openSUSE Leap 15.0:libspice-server1-0.14.0-lp150.3.6.1 openSUSE Leap 15.2:libspice-server1-0.14.2-lp152.1.4 openSUSE Leap 15.3:libspice-server1-0.14.3-1.48 openSUSE Leap 15.4:libspice-server1-0.15.0-150400.2.8 openSUSE Tumbleweed:libspice-server-devel-0.15.0-1.3 openSUSE Tumbleweed:libspice-server1-0.15.0-1.3 SUSE CaaS Platform 4.0:libspice-server-devel SUSE CaaS Platform 4.0:libspice-server1 SUSE CaaS Platform 4.0:spice SUSE Enterprise Storage 6:spice SUSE Linux Enterprise Desktop 12 SP3:libspice-client-glib-2_0-8 SUSE Linux Enterprise Desktop 12 SP3:libspice-client-glib-helper SUSE Linux Enterprise Desktop 12 SP3:libspice-client-gtk-3_0-5 SUSE Linux Enterprise Desktop 12 SP3:libspice-controller0 SUSE Linux Enterprise Desktop 12 SP3:spice-gtk SUSE Linux Enterprise Desktop 12 SP3:typelib-1_0-SpiceClientGlib-2_0 SUSE Linux Enterprise Desktop 12 SP3:typelib-1_0-SpiceClientGtk-3_0 SUSE Linux Enterprise Desktop 12 SP4:libspice-client-glib-2_0-8 SUSE Linux Enterprise Desktop 12 SP4:libspice-client-glib-helper SUSE Linux Enterprise Desktop 12 SP4:libspice-client-gtk-3_0-5 SUSE Linux Enterprise Desktop 12 SP4:libspice-controller0 SUSE Linux Enterprise Desktop 12 SP4:spice-gtk SUSE Linux Enterprise Desktop 12 SP4:typelib-1_0-SpiceClientGlib-2_0 SUSE Linux Enterprise Desktop 12 SP4:typelib-1_0-SpiceClientGtk-3_0 SUSE Linux Enterprise High Performance Computing 12 SP4:spice-gtk SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libspice-server-devel SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libspice-server1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:spice SUSE Linux Enterprise Module for Basesystem 15:libspice-client-glib-2_0-8 SUSE Linux Enterprise Module for Basesystem 15:libspice-client-glib-helper SUSE Linux Enterprise Module for Basesystem 15:libspice-client-gtk-3_0-5 SUSE Linux Enterprise Module for Basesystem 15:libspice-controller0 SUSE Linux Enterprise Module for Basesystem 15:spice-gtk SUSE Linux Enterprise Module for Server Applications 15:spice-gtk SUSE Linux Enterprise Module for Server Applications 15:spice-gtk-devel SUSE Linux Enterprise Module for Server Applications 15:typelib-1_0-SpiceClientGlib-2_0 SUSE Linux Enterprise Module for Server Applications 15:typelib-1_0-SpiceClientGtk-3_0 SUSE Linux Enterprise Server 12 SP1-LTSS:libspice-client-glib-2_0-8 SUSE Linux Enterprise Server 12 SP1-LTSS:libspice-client-gtk-2_0-4 SUSE Linux Enterprise Server 12 SP1-LTSS:libspice-client-gtk-3_0-4 SUSE Linux Enterprise Server 12 SP1-LTSS:libspice-controller0 SUSE Linux Enterprise Server 12 SP1-LTSS:spice-gtk SUSE Linux Enterprise Server 12 SP1-LTSS:typelib-1_0-SpiceClientGlib-2_0 SUSE Linux Enterprise Server 12 SP1-LTSS:typelib-1_0-SpiceClientGtk-3_0 SUSE Linux Enterprise Server 12 SP2-LTSS:libspice-client-glib-2_0-8 SUSE Linux Enterprise Server 12 SP2-LTSS:libspice-client-glib-helper SUSE Linux Enterprise Server 12 SP2-LTSS:libspice-client-gtk-2_0-4 SUSE Linux Enterprise Server 12 SP2-LTSS:libspice-client-gtk-3_0-4 SUSE Linux Enterprise Server 12 SP2-LTSS:libspice-controller0 SUSE Linux Enterprise Server 12 SP2-LTSS:spice-gtk SUSE Linux Enterprise Server 12 SP2-LTSS:typelib-1_0-SpiceClientGlib-2_0 SUSE Linux Enterprise Server 12 SP2-LTSS:typelib-1_0-SpiceClientGtk-3_0 SUSE Linux Enterprise Server 12 SP3:libspice-client-glib-2_0-8 SUSE Linux Enterprise Server 12 SP3:libspice-client-glib-helper SUSE Linux Enterprise Server 12 SP3:libspice-client-gtk-3_0-5 SUSE Linux Enterprise Server 12 SP3:libspice-controller0 SUSE Linux Enterprise Server 12 SP3:spice-gtk SUSE Linux Enterprise Server 12 SP3:typelib-1_0-SpiceClientGlib-2_0 SUSE Linux Enterprise Server 12 SP3:typelib-1_0-SpiceClientGtk-3_0 SUSE Linux Enterprise Server 12 SP4:libspice-client-glib-2_0-8 SUSE Linux Enterprise Server 12 SP4:libspice-client-glib-helper SUSE Linux Enterprise Server 12 SP4:libspice-client-gtk-3_0-5 SUSE Linux Enterprise Server 12 SP4:libspice-controller0 SUSE Linux Enterprise Server 12 SP4:spice-gtk SUSE Linux Enterprise Server 12 SP4:typelib-1_0-SpiceClientGlib-2_0 SUSE Linux Enterprise Server 12 SP4:typelib-1_0-SpiceClientGtk-3_0 SUSE Linux Enterprise Server 12-LTSS:libspice-client-glib-2_0-8 SUSE Linux Enterprise Server 12-LTSS:libspice-client-gtk-2_0-4 SUSE Linux Enterprise Server 12-LTSS:libspice-client-gtk-3_0-4 SUSE Linux Enterprise Server 12-LTSS:libspice-controller0 SUSE Linux Enterprise Server 12-LTSS:spice-gtk SUSE Linux Enterprise Server 12-LTSS:typelib-1_0-SpiceClientGlib-2_0 SUSE Linux Enterprise Server 12-LTSS:typelib-1_0-SpiceClientGtk-3_0 SUSE Linux Enterprise Server 15 SP1-LTSS:libspice-server-devel SUSE Linux Enterprise Server 15 SP1-LTSS:libspice-server1 SUSE Linux Enterprise Server 15 SP1-LTSS:spice SUSE Linux Enterprise Server Business Critical Linux 15 SP1:spice SUSE Linux Enterprise Server for SAP Applications 12 SP2:libspice-client-glib-2_0-8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libspice-client-glib-helper SUSE Linux Enterprise Server for SAP Applications 12 SP2:libspice-client-gtk-2_0-4 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libspice-client-gtk-3_0-4 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libspice-controller0 SUSE Linux Enterprise Server for SAP Applications 12 SP2:spice-gtk SUSE Linux Enterprise Server for SAP Applications 12 SP2:typelib-1_0-SpiceClientGlib-2_0 SUSE Linux Enterprise Server for SAP Applications 12 SP2:typelib-1_0-SpiceClientGtk-3_0 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libspice-client-glib-2_0-8 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libspice-client-glib-helper SUSE Linux Enterprise Server for SAP Applications 12 SP4:libspice-client-gtk-3_0-5 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libspice-controller0 SUSE Linux Enterprise Server for SAP Applications 12 SP4:spice-gtk SUSE Linux Enterprise Server for SAP Applications 12 SP4:typelib-1_0-SpiceClientGlib-2_0 SUSE Linux Enterprise Server for SAP Applications 12 SP4:typelib-1_0-SpiceClientGtk-3_0 SUSE Linux Enterprise Server for SAP Applications 12:spice-gtk SUSE Linux Enterprise Server for SAP Applications 15 SP1:libspice-server-devel SUSE Linux Enterprise Server for SAP Applications 15 SP1:libspice-server1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:spice SUSE Linux Enterprise Software Development Kit 12 SP3:spice-gtk SUSE Linux Enterprise Software Development Kit 12 SP3:spice-gtk-devel SUSE Linux Enterprise Software Development Kit 12 SP3:typelib-1_0-SpiceClientGtk-3_0 SUSE Linux Enterprise Software Development Kit 12 SP4:spice-gtk SUSE Linux Enterprise Software Development Kit 12 SP4:spice-gtk-devel SUSE Linux Enterprise Software Development Kit 12 SP4:typelib-1_0-SpiceClientGtk-3_0 SUSE Manager Proxy 4.0:spice SUSE Manager Retail Branch Server 4.0:spice SUSE Manager Server 4.0:spice HPE Helion OpenStack 8:libspice-server1 HPE Helion OpenStack 8:spice SUSE Linux Enterprise High Performance Computing 12 SP5:spice SUSE Linux Enterprise Server 12 SP2-BCL:libspice-server1 SUSE Linux Enterprise Server 12 SP2-BCL:spice SUSE Linux Enterprise Server 12 SP4-ESPOS:libspice-server1 SUSE Linux Enterprise Server 12 SP4-ESPOS:spice SUSE Linux Enterprise Server 12 SP4-LTSS:libspice-server1 SUSE Linux Enterprise Server 12 SP4-LTSS:spice SUSE Linux Enterprise Server 12 SP5:libspice-server1 SUSE Linux Enterprise Server 12 SP5:spice SUSE Linux Enterprise Server Teradata 12 SP3:spice SUSE Linux Enterprise Server for SAP Applications 12 SP5:spice SUSE OpenStack Cloud 8:libspice-server1 SUSE OpenStack Cloud 8:spice SUSE OpenStack Cloud 9:libspice-server1 SUSE OpenStack Cloud 9:spice SUSE OpenStack Cloud Crowbar 8:libspice-server1 SUSE OpenStack Cloud Crowbar 8:spice SUSE OpenStack Cloud Crowbar 9:libspice-server1 SUSE OpenStack Cloud Crowbar 9:spice important 5.4 AV:A/AC:M/Au:N/C:P/I:P/A:P 8 CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H