spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to…

A flaw was found in the SPICE file transfer protocol

A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections

A flaw was found in the spice-vdagentd daemon, where it did not properly handle client connections that can be established via the UNIX domain socket in…

A flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system to the virtual machine

Spice-vdagent: integer overflow in udscs_write() leading to heap buffer overflow

Spice-vdagent: path traversal in file transfer via unsanitized filename