CVE catalog

CVE-2019-3813

spice: CVE-2019-3813

[CVE catalog]

Severity
High · CVSS 8CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
1.21% · Oct 25, 2026

Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt. This may lead to a denial of service, or, in the worst case, code-execution by unauthenticated attackers.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianspicesid0.16.0-3fixed
Debianspiceforky0.16.0-3fixed
Debianspicetrixie0.15.2-1fixed
Debianspicebookworm0.15.1-1fixed
Alpinespice3.100.14.1-r4fixed
Alpinespice3.110.14.1-r4fixed
Alpinespice3.120.14.1-r4fixed
Alpinespice3.130.14.1-r4fixed
Alpinespice3.140.14.1-r4fixed
Alpinespice3.150.14.1-r4fixed
Alpinespice3.160.14.1-r4fixed
Alpinespice3.170.14.1-r4fixed
Alpinespice3.180.14.1-r4fixed
Alpinespice3.190.14.1-r4fixed
Alpinespice3.200.14.1-r4fixed
Alpinespice3.210.14.1-r4fixed
Alpinespice3.220.14.1-r4fixed
Alpinespice3.230.14.1-r4fixed
Alpinespice3.240.14.1-r4fixed
Alpinespice3.60.13.3-r4fixed
Alpinespice3.70.14.1-r2fixed
Alpinespice3.80.14.1-r1fixed
Alpinespice3.90.14.1-r4fixed
Ubuntuspice14.040.12.4-0nocelt1vulnerable
Ubuntuspice14.040.12.4-0nocelt1.1vulnerable
Ubuntuspice14.040.12.4-0nocelt1.1ubuntu1vulnerable
Ubuntuspice14.040.12.4-0nocelt2vulnerable
Ubuntuspice14.040.12.4-0nocelt2ubuntu1vulnerable
Ubuntuspice14.040.12.4-0nocelt2ubuntu1.1vulnerable
Ubuntuspice14.040.12.4-0nocelt2ubuntu1.2vulnerable
Ubuntuspice14.040.12.4-0nocelt2ubuntu1.3vulnerable
Ubuntuspice14.040.12.4-0nocelt2ubuntu1.4vulnerable
Ubuntuspice14.040.12.4-0nocelt2ubuntu1.5vulnerable
Ubuntuspice14.040.12.4-0nocelt2ubuntu1.6vulnerable
Ubuntuspice14.040.12.4-0nocelt2ubuntu1.7vulnerable
Ubuntuspice14.040.12.4-0nocelt2ubuntu1.8fixed
Ubuntuspice16.040.12.5-1.1ubuntu2vulnerable
Ubuntuspice16.040.12.6-4vulnerable
Ubuntuspice16.040.12.6-4ubuntu0.1vulnerable
Ubuntuspice16.040.12.6-4ubuntu0.2vulnerable
Ubuntuspice16.040.12.6-4ubuntu0.3vulnerable
Ubuntuspice16.040.12.6-4ubuntu0.4fixed
Ubuntuspice18.040.12.8-2.2vulnerable
Ubuntuspice18.040.14.0-1vulnerable
Ubuntuspice18.040.14.0-1ubuntu1vulnerable
Ubuntuspice18.040.14.0-1ubuntu2vulnerable
Ubuntuspice18.040.14.0-1ubuntu2.1vulnerable
Ubuntuspice18.040.14.0-1ubuntu2.2vulnerable
Ubuntuspice18.040.14.0-1ubuntu2.4fixed
Ubuntuspice14.040.12.4-0nocelt1vulnerable
Ubuntuspice14.040.12.4-0nocelt1.1vulnerable
Ubuntuspice14.040.12.4-0nocelt1.1ubuntu1vulnerable
Ubuntuspice14.040.12.4-0nocelt2vulnerable
Ubuntuspice14.040.12.4-0nocelt2ubuntu1vulnerable
Ubuntuspice14.040.12.4-0nocelt2ubuntu1.1vulnerable
Ubuntuspice14.040.12.4-0nocelt2ubuntu1.2vulnerable
Ubuntuspice14.040.12.4-0nocelt2ubuntu1.3vulnerable
Ubuntuspice14.040.12.4-0nocelt2ubuntu1.4vulnerable
Ubuntuspice14.040.12.4-0nocelt2ubuntu1.5vulnerable
Ubuntuspice14.040.12.4-0nocelt2ubuntu1.6vulnerable
Ubuntuspice14.040.12.4-0nocelt2ubuntu1.7vulnerable
Ubuntuspice14.040.12.4-0nocelt2ubuntu1.8fixed
Ubuntuspice16.040.12.5-1.1ubuntu2vulnerable
Ubuntuspice16.040.12.6-4vulnerable
Ubuntuspice16.040.12.6-4ubuntu0.1vulnerable
Ubuntuspice16.040.12.6-4ubuntu0.2vulnerable
Ubuntuspice16.040.12.6-4ubuntu0.3vulnerable
Ubuntuspice16.040.12.6-4ubuntu0.4fixed
Ubuntuspice18.040.12.8-2.2vulnerable
Ubuntuspice18.040.14.0-1vulnerable
Ubuntuspice18.040.14.0-1ubuntu1vulnerable
Ubuntuspice18.040.14.0-1ubuntu2vulnerable
Ubuntuspice18.040.14.0-1ubuntu2.1vulnerable
Ubuntuspice18.040.14.0-1ubuntu2.2vulnerable
Ubuntuspice18.040.14.0-1ubuntu2.4fixed
Susespiceopenstack cloud 70.12.7-10.6.1fixed
Susespicelinux enterprise server for sap applications 12 sp20.12.7-10.6.1fixed
Susespicelinux enterprise server 12 sp2-ltss0.12.7-10.6.1fixed
Susespicelinux enterprise server 12 sp2-bcl0.12.7-10.6.1fixed
Susespiceenterprise storage 40.12.7-10.6.1fixed
Susespicelinux enterprise server 12 sp1-ltss0.12.5-10.2.3.1fixed
Opensusespiceleap 15.00.14.0-lp150.3.6.1fixed
Susespicelinux enterprise server for sap applications 12 sp10.12.5-10.2.3.1fixed
Susespicelinux enterprise desktop 12 sp30.12.8-12.1fixed
Susespicelinux enterprise desktop 12 sp40.12.8-12.1fixed
Susespicelinux enterprise software development kit 12 sp30.12.8-12.1fixed
Susespicelinux enterprise software development kit 12 sp40.12.8-12.1fixed
Susespicelinux enterprise server 12 sp30.12.8-12.1fixed
Susespicelinux enterprise server for sap applications 12 sp30.12.8-12.1fixed
Susespicelinux enterprise server 12 sp40.12.8-12.1fixed
Susespicelinux enterprise server for sap applications 12 sp40.12.8-12.1fixed
Susespicelinux enterprise module for server applications 150.14.0-4.6.2fixed
Susespicelinux enterprise software development kit 11 sp40.12.4-18.1fixed
Susespicelinux enterprise server 11 sp40.12.4-18.1fixed
Susespicelinux enterprise server for sap applications 11 sp40.12.4-18.1fixed
Susespicelinux enterprise server 12-ltss0.12.4-8.21.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianspicesourcesid0.14.0-1.3not yet assignedNot reported[920762]
Debianspicesourceforky0.14.0-1.3not yet assignedNot reported[920762]
Debianspicesourcetrixie0.14.0-1.3not yet assignedNot reported[920762]
Debianspicesourcebookworm0.14.0-1.3not yet assignedNot reported[920762]
Alpinespiceapk3.100.14.1-r4Not reportedALPINE-CVE-2019-3813Not reported
Alpinespiceapk3.110.14.1-r4Not reportedALPINE-CVE-2019-3813Not reported
Alpinespiceapk3.120.14.1-r4Not reportedALPINE-CVE-2019-3813Not reported
Alpinespiceapk3.130.14.1-r4Not reportedALPINE-CVE-2019-3813Not reported
Alpinespiceapk3.140.14.1-r4Not reportedALPINE-CVE-2019-3813Not reported
Alpinespiceapk3.150.14.1-r4Not reportedALPINE-CVE-2019-3813Not reported
Alpinespiceapk3.160.14.1-r4Not reportedALPINE-CVE-2019-3813Not reported
Alpinespiceapk3.170.14.1-r4Not reportedALPINE-CVE-2019-3813Not reported
Alpinespiceapk3.180.14.1-r4Not reportedALPINE-CVE-2019-3813Not reported
Alpinespiceapk3.190.14.1-r4Not reportedALPINE-CVE-2019-3813Not reported
Alpinespiceapk3.200.14.1-r4Not reportedALPINE-CVE-2019-3813Not reported
Alpinespiceapk3.210.14.1-r4Not reportedALPINE-CVE-2019-3813Not reported
Alpinespiceapk3.220.14.1-r4Not reportedALPINE-CVE-2019-3813Not reported
Alpinespiceapk3.230.14.1-r4Not reportedALPINE-CVE-2019-3813Not reported
Alpinespiceapk3.240.14.1-r4Not reportedALPINE-CVE-2019-3813Not reported
Alpinespiceapk3.60.13.3-r4Not reportedALPINE-CVE-2019-3813Not reported
Alpinespiceapk3.70.14.1-r2Not reportedALPINE-CVE-2019-3813Not reported
Alpinespiceapk3.80.14.1-r1Not reportedALPINE-CVE-2019-3813Not reported
Alpinespiceapk3.90.14.1-r4Not reportedALPINE-CVE-2019-3813Not reported
Ubuntuspicedeb14.040.12.4-0nocelt2ubuntu1.8Not reportedUBUNTU-CVE-2019-3813Not reported
Ubuntuspicedeb16.040.12.6-4ubuntu0.4Not reportedUBUNTU-CVE-2019-3813Not reported
Ubuntuspicedeb18.040.14.0-1ubuntu2.4Not reportedUBUNTU-CVE-2019-3813Not reported
Ubuntuspicedeb14.040.12.4-0nocelt2ubuntu1.8Not reportedUSN-3870-1Not reported
Ubuntuspicedeb16.040.12.6-4ubuntu0.4Not reportedUSN-3870-1Not reported
Ubuntuspicedeb18.040.14.0-1ubuntu2.4Not reportedUSN-3870-1Not reported
Susespicerpmopenstack cloud 70.12.7-10.6.1Not reportedSUSE-SU-2019:0230-1Not reported
Susespicerpmlinux enterprise server for sap applications 12 sp20.12.7-10.6.1Not reportedSUSE-SU-2019:0230-1Not reported
Susespicerpmlinux enterprise server 12 sp2-ltss0.12.7-10.6.1Not reportedSUSE-SU-2019:0230-1Not reported
Susespicerpmlinux enterprise server 12 sp2-bcl0.12.7-10.6.1Not reportedSUSE-SU-2019:0230-1Not reported
Susespicerpmenterprise storage 40.12.7-10.6.1Not reportedSUSE-SU-2019:0230-1Not reported
Susespicerpmlinux enterprise server 12 sp1-ltss0.12.5-10.2.3.1Not reportedSUSE-SU-2019:0231-1Not reported
Opensusespicerpmleap 15.00.14.0-lp150.3.6.1Not reportedOPENSUSE-SU-2019:0167-1Not reported
Susespicerpmlinux enterprise server for sap applications 12 sp10.12.5-10.2.3.1Not reportedSUSE-SU-2019:0231-2Not reported
Susespicerpmlinux enterprise desktop 12 sp30.12.8-12.1Not reportedSUSE-SU-2019:0241-1Not reported
Susespicerpmlinux enterprise desktop 12 sp40.12.8-12.1Not reportedSUSE-SU-2019:0241-1Not reported
Susespicerpmlinux enterprise software development kit 12 sp30.12.8-12.1Not reportedSUSE-SU-2019:0241-1Not reported
Susespicerpmlinux enterprise software development kit 12 sp40.12.8-12.1Not reportedSUSE-SU-2019:0241-1Not reported
Susespicerpmlinux enterprise server 12 sp30.12.8-12.1Not reportedSUSE-SU-2019:0241-1Not reported
Susespicerpmlinux enterprise server for sap applications 12 sp30.12.8-12.1Not reportedSUSE-SU-2019:0241-1Not reported
Susespicerpmlinux enterprise server 12 sp40.12.8-12.1Not reportedSUSE-SU-2019:0241-1Not reported
Susespicerpmlinux enterprise server for sap applications 12 sp40.12.8-12.1Not reportedSUSE-SU-2019:0241-1Not reported
Susespicerpmlinux enterprise module for server applications 150.14.0-4.6.2Not reportedSUSE-SU-2019:0242-1Not reported
Susespicerpmlinux enterprise software development kit 11 sp40.12.4-18.1Not reportedSUSE-SU-2019:13943-1Not reported
Susespicerpmlinux enterprise server 11 sp40.12.4-18.1Not reportedSUSE-SU-2019:13943-1Not reported
Susespicerpmlinux enterprise server for sap applications 11 sp40.12.4-18.1Not reportedSUSE-SU-2019:13943-1Not reported
Susespicerpmlinux enterprise server 12-ltss0.12.4-8.21.1Not reportedSUSE-SU-2019:0229-1Not reported

[Debian bug #920762]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libspice-server1]Fixed

    Source package: [spice]

    Details (2)

    • 0.15.1-1 · amd64 · bookworm

      Fixed · Fixed: 0.14.0-1.3

      dsa · spice · debian · bookworm; dsa · spice · debian · 12

    • 0.15.1-1 · arm64 · bookworm

      Fixed · Fixed: 0.14.0-1.3

      dsa · spice · debian · bookworm; dsa · spice · debian · 12

  • [libspice-server-dev]Fixed

    Source package: [spice]

    Details (2)

    • 0.15.1-1 · amd64 · bookworm

      Fixed · Fixed: 0.14.0-1.3

      dsa · spice · debian · bookworm; dsa · spice · debian · 12

    • 0.15.1-1 · arm64 · bookworm

      Fixed · Fixed: 0.14.0-1.3

      dsa · spice · debian · bookworm; dsa · spice · debian · 12

[Debian 13 (Trixie)]

  • [libspice-server1]Fixed

    Source package: [spice]

    Details (2)

    • 0.15.2-1+b1 · amd64 · trixie

      Fixed · Fixed: 0.14.0-1.3

      dsa · spice · debian · 13

    • 0.15.2-1+b1 · arm64 · trixie

      Fixed · Fixed: 0.14.0-1.3

      dsa · spice · debian · 13

  • [libspice-server-dev]Fixed

    Source package: [spice]

    Details (2)

    • 0.15.2-1+b1 · amd64 · trixie

      Fixed · Fixed: 0.14.0-1.3

      dsa · spice · debian · 13

    • 0.15.2-1+b1 · arm64 · trixie

      Fixed · Fixed: 0.14.0-1.3

      dsa · spice · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]