CVE:CVE-2020-25651
CNNVD:CNNVD-202011-251
SPICE vdagent是个人开发者的一个远程连接软件的 Linux 客户端。
SPICE vdagent 中存在竞争条件问题漏洞。该漏洞源于SPICE vdagent错误地处理了active_xfers哈希表。本地攻击者可能会利用此漏洞导致SPICE vdagent占用内存，从而导致拒绝服务或获取敏感文件内容。
solution:Upgrade spice-space spice-vdagent to a higher version than 0.20.0,and avoid the version (,0.20.0]; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade fedoraproject fedora to a higher version than 32,33,and avoid the version 32,33