CVE-2016-2150

HIGH · 7.1 CVSS Gepubliceerd: 09-06-2016 CWE-284

Beschrijving

SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-5261.

Vendors

Redhat Microsoft Opensuse Debian Spice Project

Affected products

Enterprise Linux Enterprise Linux Desktop Enterprise Linux Hpc Node Eus Enterprise Linux Server Enterprise Linux Server Aus Enterprise Linux Server Eus Enterprise Linux Workstation Windows Leap Opensuse Debian Linux Spice

References

lists.opensuse.org
lists.opensuse.org
www.debian.org
www.oracle.com
www.ubuntu.com
access.redhat.com
access.redhat.com
bugzilla.redhat.com
security.gentoo.org