Security update for spice-vdagent
Two security vulnerabilities in spice-vdagent have been addressed. CVE-2026-57965 is an integer overflow in the udscs_write() function that can cause the spice-vdagent daemon to crash via a heap buffer overflow triggered by a malicious SPICE host message. CVE-2026-57966 involves improper sanitization that allows a compromised SPICE host to write arbitrary files anywhere on the guest OS. Both vulnerabilities require a compromised SPICE host to exploit.
AI Analysis
Technical Summary
The spice-vdagent component contains two vulnerabilities. The first (CVE-2026-57965) is an integer overflow in the udscs_write() function, which can be exploited by a compromised SPICE host sending a crafted message to cause a heap buffer overflow and crash the spice-vdagent daemon. The second (CVE-2026-57966) is due to improper input sanitization, enabling a compromised SPICE host to write arbitrary files to any location on the guest operating system. These issues were identified and fixed by the SUSE Product Security Team.
Potential Impact
A compromised SPICE host can exploit these vulnerabilities to crash the spice-vdagent daemon (denial of service) or write arbitrary files anywhere on the guest OS, potentially leading to further compromise or persistence. There is no indication of active exploitation in the wild.
Mitigation Recommendations
A security update for spice-vdagent has been released by the SUSE Product Security Team addressing these vulnerabilities. Users should apply the official security update to remediate these issues. Patch status is not explicitly confirmed in the provided data; check the vendor advisory for current remediation guidance.
Security update for spice-vdagent
Description
Two security vulnerabilities in spice-vdagent have been addressed. CVE-2026-57965 is an integer overflow in the udscs_write() function that can cause the spice-vdagent daemon to crash via a heap buffer overflow triggered by a malicious SPICE host message. CVE-2026-57966 involves improper sanitization that allows a compromised SPICE host to write arbitrary files anywhere on the guest OS. Both vulnerabilities require a compromised SPICE host to exploit.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The spice-vdagent component contains two vulnerabilities. The first (CVE-2026-57965) is an integer overflow in the udscs_write() function, which can be exploited by a compromised SPICE host sending a crafted message to cause a heap buffer overflow and crash the spice-vdagent daemon. The second (CVE-2026-57966) is due to improper input sanitization, enabling a compromised SPICE host to write arbitrary files to any location on the guest operating system. These issues were identified and fixed by the SUSE Product Security Team.
Potential Impact
A compromised SPICE host can exploit these vulnerabilities to crash the spice-vdagent daemon (denial of service) or write arbitrary files anywhere on the guest OS, potentially leading to further compromise or persistence. There is no indication of active exploitation in the wild.
Mitigation Recommendations
A security update for spice-vdagent has been released by the SUSE Product Security Team addressing these vulnerabilities. Users should apply the official security update to remediate these issues. Patch status is not explicitly confirmed in the provided data; check the vendor advisory for current remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- SUSE Product Security Team
- Advisory Id
- openSUSE-SU-2026:21506-1
- Cve Count
- 2
- Additional Cves
- ["CVE-2026-57966"]
- State
- PUBLISHED
Threat ID: 6aab496555bf5e2cf5990cef
Added to database: 09/17/2026, 01:59:01 UTC
Last enriched: 09/17/2026, 02:10:09 UTC
Last updated: 09/17/2026, 02:10:09 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.