CVE-2018-10893 on Ubuntu 18.04 LTS (bionic) - medium.
Description:
Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A malicious server could cause the client to crash or, potentially, execute arbitrary code.