Red Hat Qspice vulnerabilities

2 CVEs affecting Red Hat Qspice, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-0429, published 2010-08-24.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2010-0429, published 2010-08-24. Medium severity, CVSS 6.6. EPSS: 0.3% chance of exploitation in the next 30 days. libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly restrict the addresses upon which…
• CVE-2010-0428, published 2010-08-24. Medium severity, CVSS 6.6. EPSS: 0.3% chance of exploitation in the next 30 days. libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly validate guest QXL driver pointers, which…